cancel
Showing results for 
Search instead for 
Did you mean: 
cancel
557
Views
15
Helpful
8
Replies

delete log at CSA

mylove142
Level 1
Level 1

Hi all,

I use CSA version 5.1, I install CSA at DNS, MAIL and WEB. Now, when I connect to webpage of CSA to manage, I see the inform "he event database now contains approximately 900004 events. This is in danger of exceeding the configured limit. In order to preserve correct operation, events of priority Alert and below will not be logged. Since the last report of this type, 1 events have not been logged. Please purge the event database as soon as possible." and I can't receive log from all server at DMZ. Now, I want to delete log at CSA MC and I can receive log from all server at DMZ. How can I do that?

Thank you very much.

Best regards,

Duy Khang

8 Replies 8

tsteger1
Level 8
Level 8

Duy Khang,

You will need to delete some events starting with old and/or unimportant ones first and then purge the database.

Mine stays at around 200000.

You'll also want to configure your event logging to log only those events you want see and/or retain.

That should keep it from filling up.

What DB are you using?

Tom

Thank you for your answer. I install CSA MC at Windows 2003 and CSA agent is installed at DNS, Mail, WEB (operating is Solaris). How can I delete some events?

Use "Events>Event Sets" and create an event set for all events older than 30 days and purge them, then shrink the database.

Are you using MS SQL for the DB?

Tom

Yes, I also use MS SQL for the DB

I also configure auto-pruning and configure to delete log in 30 days but when I show in "Event - Events Log", I aslo see logs. I don't know the cause ? maybe I configure wrong. You can look the following attachment file.

Thank you very much.

Duy Khang

Your autopruning hasn't been triggered yet.

Check the DB size and see if it's less than 3072 MB.

You'll need to manually delete events and possibly change the DB size if you want to autoprune.

Tom

How can I check DB size? How can I delete events manually? Please show me because I am a newbie.

Check DB size at the Maintenance> Database Maintenance screen.

Delete events manually by using Events>Event Sets.

Create an event set that includes all events older than 30 days by cloning "All events in the last 7 days", changing the timestamp to all events older than 30 days and purge the events.

Tom

Getting Started

Find answers to your questions by entering keywords or phrases in the Search bar above. New here? Use these resources to familiarize yourself with the community: