IBM Security Guardium

 View Only
  • 1.  Archive does not end

    Posted Mon February 27, 2023 12:37 PM

    Hi

    We have run an archiving process (3 days and counting) but it is not finished, what can we do in these situations?



    ------------------------------
    Daniel Chinas Vega
    ------------------------------


  • 2.  RE: Archive does not end

    Posted Tue February 28, 2023 10:13 AM

    Hi Daniel,

    Here are some steps to help you see if it is still running.

    cli commands:

    support show db-processlist running  - look for any processes that might be going through cycles to purge down a table or is locked

    support show db-top-tables all - see if the rows are going down (some output below might be helpful on which table to look for)

    support show large_files 10 1 - in case the archive file is huge or there are core dump or other anomalies

    In the GUI:

    Go to Manage > Maintenance > General and then Aggregation/Archive Log

    Right click on the long-running Archive log entry.  Look for errors in each log or where the last entry might be stuck.

    Aggregation/Archive Debug Log

    Aggregation/Archive Detail Log - did it scp?

    Aggregation/Archive Fail Log

    Also under Manage > Maintenance > General, you can look at Running Query Monitor to see if the archive or some other process is causing a lock.

    One final thought, do you have the "Allow purge without exporting or archiving enabled". This sometimes helps to have it checked so things will keep moving along.

    Hopefully this will get you on the path to see what is going on. I would try to find the root cause before you restart the machine. I would only do that as a last resort. 

    If you still can't find a cause, you can open a service ticket but be sure to run the must gathers for system_db-info and backup_issues and purge_issues to start.

    Good luck!

    Jennifer



    ------------------------------
    Jennifer Dodson
    Senior Security Technical Specialist
    US National Market Southwest
    1 469 990 5954 Mobile
    jennifer.dodson@ibm.com

    IBM
    ------------------------------



  • 3.  RE: Archive does not end

    Posted Tue February 28, 2023 02:29 PM

    Daniel,

    I got your output message.

    Did you get any detail from the Aggregation/Archive logs? There might have been some clue in there if there was a day or table that was taking so long.

    When you do the "support show db-top-tables all", which table was the largest?

    If you are at 95%, you likely won't get to export and archive. So it might be best to just purge the table.

    Determine which table is the largest and some of them you can run the DAM clean command on.

    Be careful as not all of them are allowed.

    The video below can help.

    https://www.ibm.com/support/pages/using-clean-damdata-purge-data-full-guardium-appliance

    I cannot seem to preview it at this time but I am hopeful it can help with the data purging.

    Jennifer



    ------------------------------
    Jennifer Dodson
    Senior Security Technical Specialist
    US National Market Southwest
    1 469 990 5954 Mobile
    jennifer.dodson@ibm.com

    IBM
    ------------------------------