01-06-2008 06:35 PM - edited 03-09-2019 07:47 PM
Hi all,
I use CSA version 5.1, I install CSA at DNS, MAIL and WEB. Now, when I connect to webpage of CSA to manage, I see the inform "he event database now contains approximately 900004 events. This is in danger of exceeding the configured limit. In order to preserve correct operation, events of priority Alert and below will not be logged. Since the last report of this type, 1 events have not been logged. Please purge the event database as soon as possible." and I can't receive log from all server at DMZ. Now, I want to delete log at CSA MC and I can receive log from all server at DMZ. How can I do that?
Thank you very much.
Best regards,
Duy Khang
01-06-2008 11:13 PM
Duy Khang,
You will need to delete some events starting with old and/or unimportant ones first and then purge the database.
Mine stays at around 200000.
You'll also want to configure your event logging to log only those events you want see and/or retain.
That should keep it from filling up.
What DB are you using?
Tom
01-06-2008 11:25 PM
Thank you for your answer. I install CSA MC at Windows 2003 and CSA agent is installed at DNS, Mail, WEB (operating is Solaris). How can I delete some events?
01-07-2008 09:50 AM
Use "Events>Event Sets" and create an event set for all events older than 30 days and purge them, then shrink the database.
Are you using MS SQL for the DB?
Tom
01-07-2008 05:17 PM
Yes, I also use MS SQL for the DB
01-07-2008 08:24 PM
01-07-2008 08:40 PM
Duy Khang
Your autopruning hasn't been triggered yet.
Check the DB size and see if it's less than 3072 MB.
You'll need to manually delete events and possibly change the DB size if you want to autoprune.
Tom
01-07-2008 10:40 PM
How can I check DB size? How can I delete events manually? Please show me because I am a newbie.
01-08-2008 10:56 AM
Check DB size at the Maintenance> Database Maintenance screen.
Delete events manually by using Events>Event Sets.
Create an event set that includes all events older than 30 days by cloning "All events in the last 7 days", changing the timestamp to all events older than 30 days and purge the events.
Tom
Discover and save your favorite ideas. Come back to expert answers, step-by-step guides, recent topics, and more.
New here? Get started with these tips. How to use Community New member guide