Article
Sök
Shameless Plugs
Most Popular
Who's online
User login
3235
Handling Corrupted Logs in Audit
Problem
A Forum reader asked the following question:
"We are having problems with the Log DB becoming corrupted. I have tried shutting lengine.nlm so nothing is writing to mysql. This works sometimes, but not always. Is there a better way to shut down the auditing server before rebooting the system?"
And here's the response from Audit expert Jason Doering ...
Solution
Simply typing "unload lengine" is the only way to shut down the Novell Audit SLS. You can attempt to repair the table with this process:
Shut down the SLS:
unload lengine
Shut down MySQL:
1. mysqladmin -u root -p shutdown (Enter the root MySQL user's password)
2. Repair the table (enter your full path to the data tables):
myisamchk -rq vol1:\mysql\data\naudit\log
3. Restart MySQL:
mysqld_safe --autoclose
4. Restart Novell Audit:
auditsvr
If you have the caching configured correctly and leave the platform agent running, it minimizes the data you lose. The only events that could be lost are those that the SLS has not written to the database.
Disclaimer: As with everything else at Cool Solutions, this content is definitely not supported by Novell (so don't even think of calling Support if you try something and it blows up).
It was contributed by a community member and is published "as is." It seems to have worked for at least one person, and might work for you. But please be sure to test, test, test before you do anything drastic with it.
Related Articles
User Comments
- Be the first to comment! To leave a comment you need to Login or Register
- 3235 reads
0