Verifying LiveUpdate Administrator 2.x Purge Operations

Products

• Endpoint Protection

Issue/Introduction

The LUA 2.x Event Log records that LUA 2.x has "Successfully purged old contents on server 'Default Production Distribution Center'. Total of 'x' updates were purged."  How can this be verified?  Can the names of the individual files be determined?

Example Event Log entries:

29/12/10 00:30:42 GMT     Distribution Center Cleanup     informational     LUA Startup     Successfully purged old contents on server "Default Production Distribution Center". Total of "43" updates were purged.

29/12/10 00:33:59 GMT     Distribution Center Cleanup     informational     LUA Startup     Successfully purged old contents on server "Test Network". Total of "44" updates were purged.

 

Resolution

To view the exact files that were purged in the most recent job, it is necessary to examine the lua-application.log files. Find the log (lua-application.log.1, lua-application.log.2, etc) that corresponds to the time in question.  (The frequency and time for purge jobs is configured under LUA preferences: "Purge updates in Distribution Centers.") Search through the correct log for all instances of the phrase “Deleting file :”  - in an example set of logs these are:

 

2010-12-29 00:30:40,506 [pool-4-thread-8] INFO com.symantec.lua.adapter.queue.cleanCLU.PurgeCluThread - Server: Default Production Distribution Center -- Deleting file : 1293198558jtun_101206009.cal

2010-12-29 00:30:40,537 [pool-4-thread-8] INFO com.symantec.lua.adapter.queue.cleanCLU.PurgeCluThread - Server: Default Production Distribution Center -- Deleting file : 1293198558jtun_101207008.cal

...

2010-12-29 00:30:41,943 [pool-4-thread-8] INFO com.symantec.lua.adapter.queue.cleanCLU.PurgeCluThread - Server: Default Production Distribution Center -- Deleting file : 1293237031jtun_sesmwps2101224001.x64

2010-12-29 00:30:41,974 [pool-4-thread-8] INFO com.symantec.lua.adapter.queue.cleanCLU.PurgeCluThread - Server: Default Production Distribution Center -- Deleting file : 1293236145jtun_sesmwps2101224001.x86

 

There are 43 entries, the same number as reported in the Event Log. 

 

Searching the clu-prod directory for files of those names will return no matches. There will be similar files, though: new files are downloaded daily. The approximate size of the clu-prod folder (or other Distribution Center) should remain constant.