Running Offline Pruning on the Filenames or Pathnames Tables

Products

• Carbon Black App Control (formerly Cb Protection)

Issue/Introduction

Steps to run the offline pruning of the filenames or pathnames tables

Environment

App Control Server: All Supported Versions

Cause

• Offline pruning of the filenames or pathnames tables should be done when those tables are near or have reached their limit of 2.14 Billion rows.
• Offline pruning is also recommended when the filenames or pathnames tables have grown too big and have a large percentage of orphaned data thus causing performance and disk space issues

Resolution

1. Open a support case to obtain the relevant pruning script for the table/server version being pruned
2. Plan for a 24-hour maintenance window
3. Make a full backup of the DAS database
4. Login to the server with the App C service account
5. Stop the App C Server and Reporter services
   • Any SQL services accessing the DAS database should also be stopped  (e.g. SQL Job Agent, Backup, Reporting, etc).
6. Open the OfflineFilePathnamePruning.zip
7. Double click the "RunOfflinePruning.bat (do not use "Run as Administrator")
   • On step 1 type the SQL Server\SQL Instance name (for local single-tier DB use a single dot . )
   • On step 2 choose to continue.
8. When finished, copy the output of the command line window to a text file before closing it
   • If you need to reclaim file/pathname IDs for re-use follow the steps provided by Support
   • If you need to free up disk space follow the steps in this KB
9. Start the App C Server and Reporter service and any SQL services previously stopped and verify everything works.