Video Screencast Help

Purge Database to external NAS

Created: 10 Oct 2012 | 10 comments

Good day. I know about purging information and backups, but is their a way to purge the information from the SSIM Server to a NAS instead of purging / deleting it for good?  Our retention is a year, but my SSIM space is at 83% so I need to figure out how I can get information off the server but still retain it for a year.  Any info greatly appreciated. Thanks

Comments 10 CommentsJump to latest comment

mathell's picture

Are you talking about the database/ldap or the archived events?  The archived events are easy to copy off, just take a look at the directory structure and you'll figure it out.  

hgil's picture

The event archived data is what I am looking at moving from the SSIM server.  How do I go about looking at directory structure?

mathell's picture

Log into the archive server and start in the /eventarchive directory.  This should get you started.  You can use simsar to query the events on another non-SSIM system even.

hgil's picture

I went ahead and SSH into the box and I went to the eventarchive and I see the several archives I created per OS. When I go into the each I see a text file and that is it.  I do not think this is what needs to be moved.  Let me know.  Thanks

mathell's picture

Are you sure you're on the archive server (and that archiving is enabled correctly...see event storage rules)?  Because you should see a heirarchy like so:

<archive-path1-configured-in-event-storage-rules>/<year>/<month>/<day>/

<archive-path2-configured-in-event-storage-rules>/<year>/<month>/<day>/

etc, etc....

Avkash K's picture

Yes, you can move the Archive logs on timly basis.

You can use below mentioned utility for the same.

 

 

SSIM Event Archives Move Utility:

 

http://www.symantec.com/docs/TECH147712

 

Regards,

Avkash K

hgil's picture

@ Mathell, I am checking on the event server especially that we only have one server and archiving is enabled.  Retention data is set to 0 which my understanding means no data will be purged. When I go to the path, I see all my archive's name but no heirarchy like you mention. Can you send me the exact path where this heirarchy is to be located to confirm I am looking in the correct area?

@ Avkash, so this tool will move the heirarchy as Mathell explained or it extracts the data from within the archive text file I am seeing?  Thanks again

Avkash K's picture

Yes, it will move the archive logs heirarchy wise.

 

Regards,

Avkash K

mathell's picture

hgil, I believe a setting of zero will keep them basedo on quota settings rather than age.  The online help is quite worthless at figuring this out though, it says:

"A setting of 0 for retention days means that events are purged based on their age."

So, you should have data as indicated in my post.

 

hgil's picture

Thanks Mathell. No data shows as you stated.  Maybe I am looking in wrong folder location?