Symantec Endpoint Encryption Database Maintenance - Cleanup old machines and client data

Products

• Endpoint Encryption

Issue/Introduction

Symantec Endpoint Encryption Management Server has a feature that allows you to clean up machines and client events that are older than 1, 2, or 3 years. 

This article will go over the steps on how to do this.

 

TIP: For additional reporting help, see the following articles:

195890 - Building Custom Reports with Symantec Encryption Management Server

200820 - Aging systems report for Symantec Endpoint Encryption (non-reporting computers)

 

 

Resolution

First, Open Symantec Endpoint Encryption Management Server (SEEMS):

Next, Click File, Then "Add/Remove Snap-in...":

This will pull up the available snap-ins.  Look for SEE Database Maintenance: 

Add this to the Selected snap-ins list to the right:

Now that it has been added, you'll see the SEEMS Database Maintenance available from the list:

As you can see, you have the ability to clean up machine and events that are older than One Year, Two Years, or Three Years.  

Important: Before performing this cleanup routine, it is recommended to first backup the SEEMS SQL database itself in case you may need these records.  

Symantec Enterprise Division always recommends making regular backups of the servers.

 

In this example, we will delete some client events.  Once you select the option to delete, a message appears. 

Depending on the amount of data it needs to purge, this could take some time, and may have an effect on the system performance of the server.

The safest time to do this would be after hours.

 

If this is a good time to purge these client events, say "Yes":

Once the cleanup has completed, the following message appears:

Similar messages pop up when cleaning up machines that are older than 1, 2, or 3 years.

 

These events are logged as can be seen in the Admin Log of SEEMS:

Important TIP: After you click the "X" to close the MMC snap-in, be sure to say "Yes" to save the SEE Database Maintenance" snap-in, otherwise, the next time you open this, you'll have to re-add this component.   This will need to be done for each user logging in and using this snap-in.

 

For more details on this feature, please review the SEEMS Help file.

For further assistance cleaning up these systems, please contact Symantec Enterprise Division Support.

Additional Information

ISFR-1674, ISFR-1574, ISFR-1675, EPG-22856

161572 - Feature Request: SEE Management Console should have an option to remove computer names from "Deleted Computers" container.