Avoiding Dropped Audit Records

Novell Cool Solutions: Tip
By Jason Doering

Digg This - Slashdot This Posted: 2 Dec 2005

Problem

A reader asked the following question:

"I'd like to write all logins and logouts of our users to mysql database. Ther's been no problem until now. The files are written to the database. But when I started a query this morning, nearly all data from the day before were gone. How can I disable that? Any ideas?"

Solution

Here's the answer from Forum expert Jason Doering:

It sounds like you have the default expiration command still, which is set to run at midnight, and delete records that are more than 12 hours old. To change this,

1. Go to the Logging Server Options task in iManager.

2. Edit the Secure Logging Server object in the Logging Services container.

3. Select the default MySQL channel and edit it.

4. Now follow this Cool Solution article:
http://www.novell.com/coolsolutions/tip/15020.html

to configure the purging/archiving of records. Note that if you plan to keep records for a while, you should also look at this Cool Solution dealing with the default table size in MySQL:

http://www.novell.com/coolsolutions/tip/15824.html

Novell Cool Solutions (corporate web communities) are produced by WebWise Solutions. www.webwiseone.com