How to perform a rollover or reduce the size of the Enterprise Vault Auditing database
|Article:TECH35746|||||Created: 2004-01-25|||||Updated: 2013-08-19|||||Article URL http://www.symantec.com/docs/TECH35746|
The Enterprise Vault Auditing DB can grow to a very large size and sometimes it is necessary to perform a rollover to a new DB or remove entries from the DB to reclaim some disk space
The auditing database will grow in size, the amount it grows will depend on how busy the Enterprise Vault system is and the amount of auditing that has been enabled.
Eventually, it may be required to either remove data from the audit database or to create a new database.
Removing data from the database:
Within the 'EnterpriseVaultAudit' database, the 'AuditTrail' table is the only table that will grow significantly.
Remove the contents of the "AuditTrail" table and then continue to use the same database, as follows:
2. Click 'Start'| 'Programs' | 'Microsoft SQL Server' | 'Query Analyzer'
4. Enter one of the following queries as displayed in Figure 2 and 3.
|Delete * from AuditTrail||Delete removes records from the table one at a time and records each deletion in the transaction log. Delete is much slower than Truncate.|
|Truncate table AuditTrail||Truncate requires less transaction log space and it does not record each deletion. Truncate is much faster than Delete.|
5. Click 'Query' then click 'Execute'
2. Stop all the Enterprise Vault services
3. Edit the properties of the 'EnterpriseVaultAudit' system DSN as described in 'Editing the system DSN' section of this technical note.
4. Start the Enterprise Vault services
1) Creating the auditing database:
Follow the steps below to create the auditing database:
SQL Server 2000
b - In the left pane of Enterprise Manager, expand the tree to the name of the computer on which the auditing database needs to be created then click the name of that computer.
c - Click 'Action', then 'New', then 'Database'
d - When prompted for the database properties, enter a name for the new database, such as "EnterpriseVaultAudit"
e - Click OK
f - In the left pane of Enterprise Manager, expand the tree until the databases are visible
h - Click 'Tools' | 'SQL Query Analyzer'
i - In 'SQL Query Analyzer', click 'File' and then 'Open'
j - Select the file 'Audit.sql', which is in the Enterprise Vault program folder (usually C:\Program Files\Enterprise Vault or C:\Program Files (x86)\Enterprise Vault)
k - Click 'Query' and then 'Execute'
2) Editing the system DSN:
The system DSN must always be called 'EnterpriseVaultAudit' no matter what the name of the Audit Database actually is.
c - In the list of System Data Sources, click 'EnterpriseVaultAudit' and then click 'Configure'. The Microsoft SQL Server DSN Configuration wizard starts.
d - On the first page, click 'Next'
e - On the second page, click 'Next'
f - On the third page, under 'Change the default database to', select the database that has just been created
g - Click 'Next'
h - Click 'Finish' to display the summary information
i - Click 'Test Data Source' to verify the connection to the database
j - Click 'OK'
k - The Enterprise Vault Services can now be restarted and all Auditing information will now be logged in the new DB
Article URL http://www.symantec.com/docs/TECH35746