Problem:
The audit queue keeps growing over a period of time.
Environment:
CA UIM 8.31, CA UIM 8.2 , and CA UIM 8.1
Audit probe version 1.22
Cause:
The current audit probe is not in an easily modifiable state, it will therefore be dropped and its functionality will be either folded into another probe, or the probe will more likely be rewritten entirely.
Resolution/Workaround:
1. Deactivate and activate the audit probe. You might also need to set the default hub bulk size to 1
bulk_size_floor = 1
default_bulk_size = 1
2.The development team has suggested that if the audit data is important to your organization then the only short-term solution is likely to be that the audit data in the relevant tables should be archived/deleted manually from time to time (probably on a more frequent basis than the 30-day cycle which the probe itself uses) in order to avoid this problem.