clouditor
clouditor copied to clipboard
Azure Discovery: BootLogging.retentionPeriod is always set to "0"
Describe the bug When running Clouditor and looking at the evidences, all VM instances have bootLogging.retentionPeriod set to "0"
To Reproduce
- Run clouditor
- list evidences
Expected behavior We define retentionPeriod in time. Since Azure defines is in Size (saving logs until 1 GB), I would suggest to map size into time with some heuristic or we should add the option retentionSIZE and adjust the metrics accordingly?
Additional context See https://docs.microsoft.com/en-us/azure/virtual-machines/boot-diagnostics#limitations
Maybe you should leave the value at 0, because you can't tell when the data will be deleted. But we would have to consider what the value 0 means (will be deleted immediately vs. will not be deleted) or if we need another value.