07-15-2012 09:05 AM - edited 03-10-2019 07:18 PM
Hello All,
I think I understand purging in ACS5 now:
So, my question is, how do I later look at the purged data? If I suddenly need to look at logs from last year what am I supposed to do? If I restore it surely I'm just going to go over the size limit again and it'll just get purged, no?
Or is there something I'm missing?
Paul
Solved! Go to Solution.
07-15-2012 11:28 AM
No problem, if you configure database purging with incremental backup, the purging should occur at the same time in order to avoid the database getting to a point where it gets too large.
Here is the user guide for reference:
Thanks,
Tarik Admani
-Please remember to rate helpful posts!-
07-15-2012 10:20 AM
Paul,
Answers inline:
The database purging occurs at the end of every month if you have incremental backup disabled.
2. Data is purged by making incremental backups and deleting the backed up data from the local database until the
size/age pressure is relieved
That is correct I assume you are using nfs since this requires a backup staging configuration.
So, my question is, how do I later look at the purged data? If I suddenly need to look at logs from last year what am I supposed to do? If I restore it surely I'm just going to go over the size limit again and it'll just get purged, no?
That is a great question, at this point the only reliable option is to deploy another ACS server that is dedicate for logs monitoring, so that in case you need to go back and do some research that this ACS can restore the backup of the purged data and provide the information that you need. Using a production server will not be the best option because it is assume that the amount of data that is being sent to this server in the first place has enough on its plate. However, lets see if anyone else can confirm from Cisco.
Or is there something I'm missing?
Thanks,
Tarik Admani
07-15-2012 10:40 AM
Tarik,
Cheers for your answers!
Just a couple of quick clarifications...
Thanks again, much appreciated!
07-15-2012 11:09 AM
Paul,
Thanks,
Tarik Admani
07-15-2012 11:23 AM
Thanks again, one last (I promise!) clarification!
The incremetal backups take place daily, but a purge will only happen when data gets too old or the database gets too big, yes?
(IE, if I backup daily, I can still expect to report on logs that are a week old)
07-15-2012 11:28 AM
No problem, if you configure database purging with incremental backup, the purging should occur at the same time in order to avoid the database getting to a point where it gets too large.
Here is the user guide for reference:
Thanks,
Tarik Admani
-Please remember to rate helpful posts!-
07-16-2012 11:13 AM
Many thanks!
Discover and save your favorite ideas. Come back to expert answers, step-by-step guides, recent topics, and more.
New here? Get started with these tips. How to use Community New member guide