An agent is accumulating high numbers of events and not sending to SQL. The number of "DB events waiting" may decrease but never catches up.
Too many events are being monitored or sent at once for SQL to write.
Verify that your hardware meets the minimum requirements, stated in the release notes, for the amount of events monitored.
If the requirements are met, you may still need to adjust the rate at which events are being sent.
1. Open ChangeAuditor and select "View-Administration" to access the Administration Tasks tab.
2. Click "Agents" in the left column. | Click "Configurations" at the top. | Click on the configuration that is assigned to the backlogged agent. Usually "default" if no custom template has been assigned.
3. Adjust the Event Forwarder Settings to the optimum values for your environment.
Event Forwarder Settings
Use the double-arrow controls to the far right of this section title bar to either collapse and
hide the settings or to expand and show the settings in a particular section.
NOTE: If you enter an invalid value (smaller than the minimum or larger the maximum)
a red flashing symbol will display next to the field.
Forwarding Interval (seconds)
This setting determines how often an agent will forward audited events to the
repository. By default, every 5 seconds an agent forwards all of the audited events
stored in the local queue (agent's database) to the repository. Use the arrow controls
to increase this value. Valid range: 5 - 60 seconds.
Max events per connection
By default, a maximum of 500 events will be sent to the repository per connection. Use
the arrow controls to increase or decrease this number. Valid range: 100 - 9999.
Retry Interval (seconds)
This setting determines how often an agent will resend all unacknowledged events if it
does not receive an immediate acknowledgment from the repository. By default, if an
agent does not receive an immediate acknowledgment from the repository for the
audited events being transmitted, the agent will resend all unacknowledged events
after five minutes (300 seconds) from the previous attempt. Use the arrow controls to
increase or decrease this value. Valid range: 60 - 600 seconds.
Finding the best settings will probably take some trial and error. A good method would be to start with the following settings.
Forwarding Interval (seconds) 20
Max events per connection 100
Retry Interval (seconds) 60
Once you have made these changes Click OK | Restart the agent
4. Right-click on tray icon and select "Agent Status" | watch the "DB events waiting" for progress. If it appears that the number is decreasing by 100 every 20 seconds, repeat step 3 - increasing the number of Max events per connection and decreasing the Forwarding Interval.
You should be able to identify optimum settings after a few tries. It is often better to send smaller amounts of events at more frequent intervals than to send many events with more delay.
© 2024 Quest Software Inc. ALL RIGHTS RESERVED. Feedback Terms of Use Privacy Cookie Preference Center