000016355 - Can *.trc and *.aud log files on RKM appliance be deleted to free up disk space?

Document created by RSA Customer Support Employee on Jun 14, 2016Last modified by RSA Customer Support Employee on Apr 21, 2017
Version 2Show Document
  • View in full screen mode

Article Content

Article Number000016355
Applies ToRSA Key Manager Appliance 2.5.0.x
Oracle 10G 10.2.0.4.0
IssueCan *.trc and *.aud log files on RKM appliance be deleted to free up disk space?
Can *.trc and *.aud log files on RKM appliance be deleted to free up disk space?
RKM Appliance generating large number of files consuming considerable disk space
What is the significance of *.trc and *.aud files?
There are a large number of files generated in the following folders that consume considerable hard disk space:
     /opt/oracle/admin/<Oracle-SID>/udump/*.trc
     /opt/oracle/admin/<Oracle-SID>/bdump/*.trc
     /opt/oracle/admin/<Oracle-SID>/adump/*.aud
ResolutionThe trace files (*.trc under the directories /opt/oracle/admin/<Oracle-SID>/udump and /opt/oracle/admin/<Oracle-SID>/bdump) contain detailed information about an operation being done. This is basically used for debugging if there is an issue. Old files (2 days and older just to be on the safe side) can always be deleted safely, but it's better to look into the alert log first and see if there is any problem, and if there is a problem see the associated trace file as well, otherwise they can be safely purged.  The alert logs on the appliance are written to /opt/oracle/admin/<Oracle-SID>/bdump/alert_<Oracle-SID>.log.  Contact RSA Customer Support to obtain a guide "RSA Key Manager Error Code Directory Final.docx" which documents (in section 3) the most common errors seen in alert logs and remedial steps you can take.
The audit files (*.aud in the directory /opt/oracle/admin/<Oracle-SID>/adump) are mandatory audit statements put by Oracle for operations done by the SYS user, for example, when you login as sqlplus / as sysdba. The audit files can also be deleted safely (older than 2 days to be on the safe side).
The following approach can be taken to periodically delete *.trc and *.aud files on RKM Appliance:
1. Once per day tar up all *.aud, and *.trc files in the following folders that are older than 2 weeks, and then move the archive to an external file server:
     /opt/oracle/admin/<Oracle-SID>/udump
     /opt/oracle/admin/<Oracle-SID>/bdump
     /opt/oracle/admin/<Oracle-SID>/adump
2. Once per month [or any other recurrence suitable for your deployment] delete the archived tar containing *.aud and *.trc files on the external file server that are older than [determine # of months/weeks suitable for your deployment] months/weeks.
Legacy Article IDa49131

Attachments

    Outcomes