The Enterprise Vault Auditing DB can grow to a very large size and sometimes it is necessary to perform a rollover to a new DB or remove entries from the DB to reclaim some disk space.
This document applies to Enterprise Vault 12.3 and later versions. For instructions about how to perform rollover of the Auditing database in Enterprise Vault 12.4 and earlier see https://www.veritas.com/docs/100044200.
The auditing database will grow in size, the amount it grows will depend on how busy the Enterprise Vault system is and the amount of auditing that has been enabled.
Eventually, it may be required to either remove data from the audit database or to create a new database.
Removing data from the database:
'EnterpriseVaultAudit' database, the 'AuditTrail' table is the only table that will grow significantly.
Remove the contents of the "AuditTrail" table and then continue to use the same database, as follows:
1. Back up the 'EnterpriseVaultAudit' database
Using SQL Server 2005/2008
2. Start SQL Server Management Studio
3. Right click the EnterpriseVaultAudit (Default DB name) Database and select
4. In the top right hand window use one of the below queries to either delete from, or truncate, the Audit DB
This will delete ALL entries from the AuditTrail table/Audit Database
Delete from AuditTrail
This will delete all entries OLDER than midnight on the 31st of November 2012 and leave anything newer in the DB
Delete from AuditTrail where AuditDate < '2012-12-01 00:00:00.000'
This will delete ALL entries from the AuditTrail table/Audit Database but is faster than the delete query above
Truncate Table AuditTrail
Creating a new database whilst keeping the existing database:
1. Create the new database as described in
Creating the auditing database' section of this technical note
2. Stop all the Enterprise Vault services
3. Edit the properties of the 'EnterpriseVaultAudit' system DSN as described in
Editing the system DSN' section of this technical note.
4. Start the Enterprise Vault services
Each computer on which auditing is enabled has a limited number of connections that it can make to the auditing database. These connections are reused as needed.
Creating the auditing database:
Follow the steps below to create the auditing database:
SQL Server 2005/2008
a - Open SQL Server Management Studio and connect to the correct SQL Server
b - Right click 'Databases' in the Explorer view and select
'New Database...' and give the new database a relevant name e.g. EnterpriseVaultAudit2
c - Select the desired paths for the Data and Log files and click
d - Click
'File' | 'Open' | 'File' and browse to the Enterprise Vault installation folder on the EV Server then select the
e - On the SQL Editor toolbar, use the drop down list of Database names to ensure the new Audit Database (EnterpriseVaultAudit2) has been selected
f - Select
'! Execute' from the menu option
If the operation was successful, the message '(1 row(s) affected)' will be displayed
2) Editing the system DSN:
The system DSN must always be called
'EnterpriseVaultAudit' no matter what the name of the Audit Database actually is.
The existing system DSN must be edited so that it connects to the new database.
To edit the system DSN, stop all the Enterprise Vault services and then do the following on each computer that logs Enterprise Vault audit information:
a - On the Enterprise Vault Server open the
'OBDC Data Source Administrator' For 32bit operating systems, this may be found under Administrative Tools. For 64 bit operating systems, it may be opened with "C:\Windows\SysWOW64\odbcad32.exe"
b - In
ODBC Data Source Administrator', click the
System DSN' tab
c - In the list of System Data Sources, click
'EnterpriseVaultAudit' and then click
Microsoft SQL Server DSN Configuration wizard starts.
d - On the first page, click
e - On the second page, click
f - On the third page, under
Change the default database to', select the database that has just been created
g - Click
h - Click
Finish' to display the summary information
i - Click
Test Data Source' to verify the connection to the database
j - Click
k - The Enterprise Vault Services can now be restarted and all Auditing information will now be logged in the new DB
If desired, the original Audit DB files may now be moved to a new location to free up disk space.
To view the Audit information held in the original Audit DB, use the AuditViewer to connect to it.