# \#audit

**URL:** https://community.sailpoint.com/discuss/tag/audit/102.md

[Latest](https://community.sailpoint.com/discuss/latest.md) · [Categories](https://community.sailpoint.com/discuss/categories.md) · [Tags](https://community.sailpoint.com/discuss/tags.md)

---

## [File Access Manager Service Pack upgrade stuck at pending](https://community.sailpoint.com/discuss/t/file-access-manager-service-pack-upgrade-stuck-at-pending/36390)

<div class="topic-metadata">

**Author:** [@deependra\_basnet](https://community.sailpoint.com/discuss/u/deependra_basnet)\
**Replies:** 1\
**Last updated:** [October 15, 2026, 6:37pm UTC](https://community.sailpoint.com/discuss/t/file-access-manager-service-pack-upgrade-stuck-at-pending/36390 "2026-10-15T18:37:19Z")

</div>

I imported the package for SP5 patch. Everything ran fine except for two file servers. They stayed pending for a while. For one of the servers after restarting and manually installing the activity monitor using the colle…

---

## [FAM Activity Monitoring disk space utilization reached 96% due to the fpservercluster82 file](https://community.sailpoint.com/discuss/t/fam-activity-monitoring-disk-space-utilization-reached-96-due-to-the-fpservercluster82-file/37093)

<div class="topic-metadata">

**Author:** [@PreshitGhode](https://community.sailpoint.com/discuss/u/PreshitGhode)\
**Replies:** 2\
**Last updated:** [December 3, 2025, 7:19am UTC](https://community.sailpoint.com/discuss/t/fam-activity-monitoring-disk-space-utilization-reached-96-due-to-the-fpservercluster82-file/37093 "2025-12-03T07:19:56Z")

</div>

Hi Team We are experiencing high disk space utilization on our File Access Manager (FAM) Activity Monitoring server. The disk usage has reached approximately 96%, and the primary cause appears to be the fpservercluster8…

---

## [Uncorrelated accounts - How to detect incorrectly correlated accounts - Theoretical scenario](https://community.sailpoint.com/discuss/t/uncorrelated-accounts-how-to-detect-incorrectly-correlated-accounts-theoretical-scenario/36369)

<div class="topic-metadata">

**Author:** [@InJhong](https://community.sailpoint.com/discuss/u/InJhong)\
**Replies:** 5\
**Last updated:** [July 28, 2025, 12:49am UTC](https://community.sailpoint.com/discuss/t/uncorrelated-accounts-how-to-detect-incorrectly-correlated-accounts-theoretical-scenario/36369 "2025-07-28T00:49:43Z")

</div>

Hello Everyone, I have a scenario(s) that I’d like to discuss options/thoughts on: Tightening existing controls and SLAs is one thing but I need to balance security and reasonable controls. Note: this might be an envir…

---

## [Remove a DB2 user from a RACF group](https://community.sailpoint.com/discuss/t/remove-a-db2-user-from-a-racf-group/34401)

<div class="topic-metadata">

**Author:** [@csaipriya](https://community.sailpoint.com/discuss/u/csaipriya)\
**Replies:** 6\
**Last updated:** [August 27, 2024, 8:12pm UTC](https://community.sailpoint.com/discuss/t/remove-a-db2-user-from-a-racf-group/34401 "2024-08-27T20:12:22Z")

</div>

We are currently using a delimited file connector to read DB2 tables running on mainframe, where the users are part of two groups - FICH01A and ISDDB2. Currently, when a manager revokes access during certification, we cr…

---

## [How to schedule audit report to run quarterly and generate report only for last 3 months in IIQ](https://community.sailpoint.com/discuss/t/how-to-schedule-audit-report-to-run-quarterly-and-generate-report-only-for-last-3-months-in-iiq/33570)

<div class="topic-metadata">

**Author:** [@kalpanaswain](https://community.sailpoint.com/discuss/u/kalpanaswain)\
**Replies:** 6\
**Last updated:** [April 18, 2024, 4:05pm UTC](https://community.sailpoint.com/discuss/t/how-to-schedule-audit-report-to-run-quarterly-and-generate-report-only-for-last-3-months-in-iiq/33570 "2024-04-18T16:05:23Z")

</div>

Hi, We have already have a audit report but when scheduled to run, it gives audit data from the beginning of when IIQ was installed first, like 5 years back. We want to limit the data to show only last 3 months whenever…

---

## [Auditing Password Changes from Password Interceptor](https://community.sailpoint.com/discuss/t/auditing-password-changes-from-password-interceptor/33159)

<div class="topic-metadata">

**Author:** [@TessuJohny](https://community.sailpoint.com/discuss/u/TessuJohny)\
**Replies:** 1\
**Last updated:** [March 11, 2024, 6:14pm UTC](https://community.sailpoint.com/discuss/t/auditing-password-changes-from-password-interceptor/33159 "2024-03-11T18:14:27Z")

</div>

Hi All, Is there a way to see the details about a password change captured by Password Interceptor in SailPoint IIQ UI, like when initiated, who initiated, for whom, for which all applications it was a success, etc. ? R…

---

## [FAM 8.3 NetApp activities Monitoring issue](https://community.sailpoint.com/discuss/t/fam-8-3-netapp-activities-monitoring-issue/31517)

<div class="topic-metadata">

**Author:** [@hrushi23](https://community.sailpoint.com/discuss/u/hrushi23)\
**Replies:** 1\
**Last updated:** [October 22, 2023, 5:33am UTC](https://community.sailpoint.com/discuss/t/fam-8-3-netapp-activities-monitoring-issue/31517 "2023-10-22T05:33:50Z")

</div>

Hello everyone, I’m encountering an issue with FAM 8.3’s Activity Monitoring and would really value your insights. I’ve successfully installed the activity monitoring agent for NetApp, but unfortunately, I’m not seeing …

---

## [Activity Monitoring on local folder with Windows File Server Connector](https://community.sailpoint.com/discuss/t/activity-monitoring-on-local-folder-with-windows-file-server-connector/29501)

<div class="topic-metadata">

**Author:** [@ADArco](https://community.sailpoint.com/discuss/u/ADArco)\
**Replies:** 2\
**Last updated:** [April 4, 2023, 3:44am UTC](https://community.sailpoint.com/discuss/t/activity-monitoring-on-local-folder-with-windows-file-server-connector/29501 "2023-04-04T03:44:58Z")

</div>

Hi everyone. I have a problem about the configuration of a new Activity Monitor. In the 8.3 FAM version, the procedure of creating a new Application is migrated entirely on the Business Website. Following the steps in…

---

## [Delete 'Audit Event' objects which are more than 1 year old](https://community.sailpoint.com/discuss/t/delete-audit-event-objects-which-are-more-than-1-year-old/26819)

<div class="topic-metadata">

**Author:** [@amitghosh18](https://community.sailpoint.com/discuss/u/amitghosh18)\
**Replies:** 4\
**Last updated:** [March 23, 2023, 1:56am UTC](https://community.sailpoint.com/discuss/t/delete-audit-event-objects-which-are-more-than-1-year-old/26819 "2023-03-23T01:56:13Z")

</div>

I have one requirement to create a rule which will delete ‘AuditEvent’ objects which are more than 1 year old. I am planning to use the below code to delete the AuditEvent. But not able to understand the filter option w…
