FMS support bundle taking a long time due to audit log size (4295746)

When generating a FMS Support Bundle from the Foglight Console the Manage Support Bundle dashboard times-out due to an audit log size of over 700mb. Support bundle generation can take a very long time and generate a very large file.

When generating a FMS Support Bundle from the Command Line it take hours for the process to complete.

When a large amount of changes are made to the Foglight rules, registry variables, etc the Auditing_log table records each and every change. The FMS Support Bundle process gathers a 7 day export of this table into a readable file called AuditLog. Due to the number of changes recorded this causes the AuditLog to be excessively large and take a long time to generate.

An Enhancement Request FGL-12670 has been opened to reduce the amount of audit events we include in the Support Bundle.

The auditing log table already has an index but we have requested the ability to purge records (UI purge) to the ER.

As a workaround you can copy and truncate the Auditing_log table, if mistakes are made in this process you will not be able to see the auditing information.

The Foglight Management Server (FMS) must be stopped while this procedure is executed.

This has to be done on the backend Database directly using SQL

To copy table:

CREATE TABLE Auditing_old

AS (SELECT * FROM Auditing_log);

To truncate table:

TRUNCATE table Auditing_log;