ControlPoint 8.8 - User Guide

Tips for Archiving a Large Accumulation of Audit Data

If you have many months or even years' worth of accumulated data to archive, doing all of it in a single operation can be resource-intensive and can perform slowly. When you run the audit log archive process, however, you have the option of specifying the number of days' worth of audit log data to keep in the database.   If, however, you have many months or even years' worth of accumulated data to archive, doing all of it in a single operation can be resource-intensive and can bog down your system.  It is recommended, therefore, that when you initially run the archiving operation you specify a relatively large amount of data to retain, then incrementally reduce that number with each subsequent run of the operation until you have reached the number of days' worth that you want to retain on an ongoing basis.

EXAMPLE:

Suppose 1,000 days' worth of audit log data has accumulated on your farm, but going forward you only want to retain 60 days' worth.  Depending on the size of your farm, archiving 940 days worth of data in a single operation might tie up the system for several hours. To avoid this problem, the first time you run the process you may want to choose to save 800 days' worth (that is, archive 200 days' worth) of audit log data.  

The next time you run the operation, you may want to bring the number down to 600 (that is, archive another 200 or so days' worth), and so on, until you have reduced the amount of audit log data in the database to a manageable amount.  You can then schedule the operation to run on a regular basis, saving only the amount that you want to retain on an ongoing basis.