Before scheduling a job, ensure that you have reviewed the best practice information in Planning your jobs.
1 |
2 |
Click Add to open the Purge and Archive wizard. |
5 |
If required, select Purge and choose the records to be deleted from the production database. |
6 |
Select Archive events if you want to create an archive database. A yearly archive database will be created beginning on the first day of the selected month. For example, if you select Jan, the database will contain events for 12 months beginning on January 1. |
7 |
Click Next. |
9 |
Click Finish to save the job and exit the wizard. |
2 |
Click Edit to open the Purge and Archive wizard. |
4 |
Click Finish to save your selections and exit the wizard. |
The wizard opens when you click Add on the Purge and Archive page under Administration Tasks. Use this wizard to define the records to be purged or archived, and the cleanup schedule.
Before scheduling a job, ensure that you have reviewed the best practice information in Planning your jobs.
All events: Select this option to purge all events from the database that are older than the specified time. Only selected events: Select this option to purge only selected events, based on specific criteria, from the database that are older than the specified time. Use the criteria tabs to define the events to be deleted: See Purge selected records for a description of the criteria tabs and options that appear to specify the records. | |
Specifies if the job is to be run on a weekly or monthly schedule. NOTE: When Monthly is selected, specify the monthly schedule to be used to run the job. For example, 1 for every month (default), 2 for every other month, 6 for every six months or twice a year, etc. | |||||
Specifies the maximum number of events to be purged for each cycle. | |||||
When a Monthly schedule is selected, specifies on which day of the month the job is to be run:
When a Weekly schedule is selected, specifies the weekly schedule to be used to run the job. For example, 1 for every week, 2 for every other week, 3 for every third week, and 4 for every fourth week. | |||||
When a Weekly schedule is selected, defines the days of the week when the job is to be run. | |||||
This read-only field specifies the last time (date and time) the job ran. | |||||
This read-only field specifies the next time (date and time) when the job is scheduled to run. |
5 |
Select Finish. |
Use the criteria tabs in the Purge and Archive wizard to define what specific records are to be deleted from the database. These tabs are enabled when you choose the Purge | Only selected events option.
1 |
From the Purge and Archive wizard, select the Purge option, and then enable Only selected events to activate the criteria tabs. |
2 |
3 |
On the Select Active Directory Objects dialog, use the Browse or Search page to locate the user, computer or group to be included. Once you have located a directory object, select it and click Add to add it to the selection list at the bottom of the dialog. |
4 |
After selecting one or more directory objects, click Select to save your selection and close the dialog. |
NOTE: Use Add with Events (instead of Add) to select users, computers, or groups that already have an event associated with it in the database. Use this to purge events tied to users who have been removed from Active Directory. |
NOTE: To purge events NOT generated by the users, computers, or groups listed on the Who tab, select the Exclude The Following Selection(s) check box at the top of the Who tab. |
1 |
From the Purge and Archive wizard, select the Purge option, and then enable Only selected events to activate the criteria tabs. |
2 |
NOTE: If you used Add With Events instead, click Add Wildcard Expression on the Add Users, Computer, or Groups dialog. |
• |
• |
NOTE: When using the Group option, the Group Membership Expansion option on the Coordinator Configuration page (on the Administration Tasks tab) must be set to Expand all groups. |
4 |
Click OK to close the dialog and add the wildcard expression to the Who tab. |
1 |
From the Purge and Archive wizard, select Purge, and then enable Only selected events to activate the criteria tabs. |
2 |
Open the What tab, expand Add (or Add With Events) and select the appropriate option. When you select an option, an additional dialog appears allowing you to enter specific criteria: |
• |
Subsystem | Active Directory - Add Active Directory Container dialog |
• |
Subsystem | AD Query - Add Active Directory Container dialog |
• |
Subsystem | ADAM (AD LDS) - Select the agent that hosts the ADAM/LDS Instance dialog |
• |
Subsystem | Exchange - Add Exchange Container dialog |
• |
Subsystem | Office 365 - Office 365 dialog |
• |
Subsystem | File System - Add File System Path dialog |
• |
Subsystem | Group Policy - Add Group Policy Container dialog |
• |
Subsystem | Local Account - Add Local Account dialog |
• |
Subsystem | Logon Activity - Add Logons dialog |
• |
Subsystem | Registry - Add Registry Key dialog |
• |
Subsystem | Service - Add Service dialog |
• |
Subsystem | SharePoint - Add SharePoint Path dialog |
• |
Subsystem | SQL - Add SQL Instance dialog |
• |
Event Class - Add Facilities or Event Classes dialog |
• |
Object Class - Add Object Classes dialog |
• |
Severity - Add Severities dialog |
• |
Result - Add Results dialog |
3 |
Once you have selected or entered the specific criteria, click Add to add it to the selection list at the bottom of the dialog. |
4 |
Click OK to save your selection and close the dialog. |
1 |
From the Purge and Archive wizard, select Purge, and then enable Only selected events to activate the criteria tabs. |
2 |
4 |
Click OK to save your selection and close the dialog. |
NOTE: Use Add With Events (instead of Add) to select agents, domains, or sites that already have an event associated with it in the database. |
NOTE: To purge or archive events NOT captured by the agents, domains, or sites listed on the Where tab, select the Exclude The Following Selection(s) check box at the top of the Where tab. |
1 |
From the Purge and Archive wizard, select Purge, and then enable Only selected events to activate the criteria tabs. |
2 |
NOTE: If you used Add With Events instead, click Add Wildcard Expression on the Add Agents, Domains, Sites dialog. |
• |
• |
4 |
Click OK to close the dialog and add the wildcard expression to the Where tab. |
1 |
3 |
Click OK to close the dialog and add the server type to the ‘Where’ list. |
1 |
From the Purge and Archive wizard, select Purge, and then enable Only selected events to activate the criteria tabs. |
• |
4 |
Click OK to close the dialog and add the wildcard expression to the Origin tab. |
NOTE: To purge or archive events not originating from the workstations or servers listed on the Origin tab, select Exclude The Following Selection(s) box at the top of the Origin tab. |
1 |
From the Purge and Archive wizard, select Purge, and then enable Only selected events to activate the criteria tabs. |
2 |
Open the Origin tab and click Add With Events. |
NOTE: Use Add Wildcard Expression to enter a wildcard expression to include workstations/servers from this list based on their NetBIOS name or IP address. |
3 |
On the Add Origin dialog, select one or more originating workstations/servers from the list and click Add to add it to the selection list at the bottom of the page. |
4 |
Click OK to close the dialog and add the selected workstations to the Origin tab. |
© ALL RIGHTS RESERVED. Conditions d’utilisation Confidentialité Cookie Preference Center