Our auditors require from us to be able to track who is doing what on our systems.
I had a look on the logs Brightmail_Admin_Events.YYYY-MM-dd.log and here is the information I can find
Date time, User xxx has logged in whithout any information about which policy group he belongs to. It could be useful to identify when users log in with unexpected rights.
Fortunately, actions about configuration modification and mail release seem to be logged.
I see the Admin log for today and the one for yesterday. I didn't found either a way to keep more than 2 days of Admin Logs, or a way to automatically store them on the control center or on an external system.
There is definitely a need for being able to consolidate automatically the admin logs, (for instance on a montly basis) and/or mail them to an smtp address as part of the scheduled tasks and/or reports.
Regards
Amundi