Video Screencast Help

Cleanup EV 10 Audit Database

Created: 11 Dec 2012 • Updated: 11 Dec 2012 | 5 comments
This issue has been solved. See solution.

Hi,

Is there any proper procedure to cleanup old entries from EV Audit Database? Currently the DB has become about 30GB over time, want to reduce the size.

Can we delete old entries say older than 6 months for example?

Many Thanks

Comments 5 CommentsJump to latest comment

TonySterling's picture

You can use a delete statement to remove items older than 6 months.  I would recommend backing up and truncating the log file afterwards as it will may get quite large during the delete process.

 

Some useful info here:

How to perform a rollover of the Enterprise Vault auditing database.

Article:TECH35746  |  Created: 2004-01-25  |  Updated: 2012-04-23  |  Article URL http://www.symantec.com/docs/TECH35746

 

SOLUTION
ia01's picture

Thanks Tony,

So if I write a query to delete * from audittrail where audit date is less than a specific date 6 months back and then truncate the log that should be good enough?

TonySterling's picture

I would think so, I would suggest you do a Select statement first to get a count with your where clause.  You want to be sure you are deleting items older than 6 months and not younger than.  :)

psj_symhelp's picture

take sql database backup and commit transaction log entry to minimize database size....

ia01's picture

This is waht I have done and seems to work fine. Cleaned up lot of space in Audit Database

 

 

Delete from [EnterpriseVaultAudit].[dbo].[AuditTrail]

where AuditDate < '2012-01-01 00:00:00.000'

 

 

USE EnterpriseVaultAudit

GO

DBCC SHRINKFILE(VaultLog70, 1)

BACKUP LOG EnterpriseVaultAudit TO DISK='NUL'

DBCC SHRINKFILE(VaultLog70, 1)

GO