Chat now with support
Chat mit Support

Change Auditor - For Advanced Users 7.1.1 - Technical Insight Guide

Change Auditor Services Change Auditor licensing processes Component Start-up Considerations Change Auditor network communications Coordinator internal tasks Registry Settings Change Auditor built-in fault tolerance Change Auditor protection Database Considerations Account exclusions best practices

Scheduled purge job

The scheduled purge job task checks every five minutes to determine if it needs to run a job. Using the Purge Jobs task on the Administration Tasks page, you can create and schedule purge jobs to delete events older than a specific calendar interval.

When the purge job runs, by default it purges a maximum of 500,000 events in that five minute period. If there are more than 500,000 events to be purged, then five minutes later another 500,000 events are purged until all of the events are purged.If there are 500,000 events or less in a purge job, then the purge job task checks again in the next five minutes and obeys the ‘next run’ time.

You cannot change the scheduled purge job task cycle; however, you can modify the Batch Limit setting on the Purge Job wizard to specify the maximum number of events to be purged each purge cycle.

NOTE: If SQL is slow or disk space is low, decrease this limit to 100000 or 50000. When this limit is decreased, the purge job will take longer to complete.

Scheduled archive job

select to create a yearly archive database for older events that are no longer required to be represented in your reports.

When scheduling an archive job for the first time it may take a long time to complete (depending on how many years of data you are asking to be archived). Batch limit does not apply to an archive type job.

When running an archive job, you need to pay attention to disk space growth on the SQL server.

 

* 
CAUTION: Carefully review your current jobs before creating a new job or altering an existing job, as it is possible to create purge and archive conflicts.
* 
NOTE: If you have specific purge jobs that you want to complete before a scheduled archive, ensure that you leave enough time between the purge only jobs and the archive job.

Before scheduling a job, ensure that you have reviewed the best practice information in the Change Auditor User Guide - Purging and Archiving your Change Auditor Database: Planning your jobs section.

Scheduled report job

The scheduled report job task checks every five minutes to determine if reporting is enabled and needs to email a search query report. The scheduled reporting feature uses the same SMTP configuration defined for alerting to distribute search query reports via email. Using the Report tab (Search Properties tabs) for a search, you can enable reporting and schedule the distribution of the report. When the scheduled report job task determines a report is to be sent, the report is sent as an attachment via email to the designated recipients. The default is to zip the attachment when the report is 1 MB or greater.

Registry Settings

This section provides information about the different registry settings that can be used to control Change Auditor.

•
Force agent WCF port
•
Force client port
•
Force SDK port
•
Use predefined GC for name resolution
•
Allow collation switch
•
Report zip limit
•
SQL command timeout
•
Enable ChangeAuditor Agent service to start with the Microsoft security update (KB2264107)
•
Adjust memory dumps settings
Verwandte Dokumente

The document was helpful.

Bewertung auswählen

I easily found the information I needed.

Bewertung auswählen