UIM v9.20 - audit queue is backing up

book

Article ID: 185412

calendar_today

Updated On:

Products

NIMSOFT PROBES DX Infrastructure Management

Issue/Introduction

How do I disable this queue if it isn't needed?

Environment

Release : 9.2.0

Component : audit v9.04

Resolution

The current version of the audit probe is v9.04. It is not installed by default in UIM v9.20. If you see the audit probe in a 9.20 installation, it is probably a leftover artifact from a previous UIM version or it was manually deployed to the Primary hub.

If you want to use it for auditing, you can deploy it from the local archive on the Primary hub.
https://techdocs.broadcom.com/content/broadcom/techdocs/us/en/ca-enterprise-software/it-operations-management/ca-unified-infrastructure-management-probes/GA/alphabetical-probe-articles/audit/audit-im-configuration.html

Here is a link to a helpful KB Article on how to configure the audit probe for configuration changes.
https://ca-broadcom.wolkenservicedesk.com/external/article?articleId=128820

Otherwise you can deactivate the probe if its already deployed and youre not planning on using it.

Removing the queue
You can open the hub probe and click on the Queues Tab and select the audit probe queue and then rt-click and delete it.

After you delete the audit probe, you may then delete the contents of the audit probe directory.

Additional Information

Since the audit probe is in the local archive and also downloadable via the download site, you can deploy it for a specific/temporary purpose if needed at a later date.

Please also note that the audit tables may grow very large depending on how you configure your auditing.

  • AUDIT_CONFIG_CHANGE
  • AUDIT_EVENT
  • AUDIT_VERSION