Audit log queries slow with increased audit retention regardless of query time frame

Products

• Messaging Gateway

Issue/Introduction

 Message audit log queries performed from the Symantec Messaging Gateway control center Status->Message Audit Logs page take the same length of time regardless of the time frame selected i.e. queries for messages within the last hour take as long as queries for messages within the last month. For installations with a long audit retention policy or large mail volumes, this can cause audit log queries to time out even when searching relatively narrow time frames.

Cause

 This is known issue with the way in which audit log searches are performed.

Resolution

 This issue is being reviewed by Symantec for improvement in a future release.

Installations experiencing timeouts can either decrease audit log retention or search scanner hosts individually from the command line interface (CLI).

Please subscribe to this document to be automatically notified of updates.