ControlPoint 8.8 - User Guide

How the Audit Log Archiving Process Works

As part of the setup process, the table where archived audit log data will be stored is created in an external SQL database.

Whenever the archive process is run (which may be from the xcUtilities interface, from a command line, the ControlPoint application interface, or through Windows Task Scheduler), the process carries out the following actions:

1Checks the parameter value of the ControlPoint Configuration Setting ArchiveAuditLogIncludeWeb
Applications for a list of Web applications for which audit log data should be archived.  If the parameter value is null, all Web applications will be included in the archive process.

EXCEPTION:  If the archive process was initiated from the ControlPoint application interface, all selected objects will be included, regardless of this setting.

See also Specifying the Web Applications to Include in the Archiving Process.

2For each Web application to be processed:

a)Uses the date for the earliest audit record in the content database(s) for the selected Web application as the start date.  

b)Retrieves audit log records within the Web application that were created between the start date and the next process interval date, as determined by the ControlPoint Configuration Setting ArchiveAuditLogProcessInterval.  

NOTE:  By default, the process interval is one (1) hour, but this value can be changed.  See Changing the Archive Audit Log Process Interval (Optional).

c)Writes the audit data for the process interval to the external database table as a database transaction.

NOTE:  If an exception occurs, data will not be committed to the external database, the transaction will be rolled back, and the archiving process will stop.  Exception conditions will be captured in the ControlPoint Task Audit.

d)Once the audit records have been committed to the external database, deletes the corresponding records from the content database.

NOTE:  If an exception occurs during the deletion of audit records for a site collection, all the records for the site collection with the current task ID will be removed from the external database (to prevent duplication of data that still exists in the content database), and the archiving process will stop.  Exception conditions will be captured in the ControlPoint Task Audit.

e)Advances to the next process interval and repeats substeps b) - d) until the last date to be processed (as determined by the user-specified “number of days to keep in SharePoint”) is reached.

3Repeats Step 2 for each Web application to be processed.