000035265 - Questions Around Offline Tasks and Database REOT Tables in RSA Adaptive Authentication (OnPrem) 7.x

Document created by RSA Customer Support Employee on Jul 5, 2017
Version 1Show Document
  • View in full screen mode

Article Content

Article Number000035265
Applies ToRSA Product Set: Adaptive Authentication (OnPrem)
RSA Product/Service Type: Adaptive Authentication (OnPrem)
RSA Version/Condition: 7.x
 
IssueSome AA Customers or DBAs may have questions similar to the following. We are seeing two insert statements causing more archive log generations on the RSA database during the nightly offline tasks.  We would like to know if this is an expected behavior or something we need to address?  Here are the Insert Statements: INSERT INTO REOT_EVENT_DYNAMIC_BUCKETS (EVENT_SEQUENCE, USER_HASH, SHORT_DATE, CATEGORY_ID, BUCKET) VALUES (:1 , :2 , :3 , :4 , :5 ) and  INSERT INTO REOT_EVENT_EXTRA_DATA .
TasksVerify that the time period mentioned in the case notes falls within the nightly offline task jobs as defined in the Scheduler. 
ResolutionProvide the following explanation/response:
The high level of activity on those tables and the ones listed below is expected behaviour when the nightly risk engine Offline Tasks are running.  Specifically, the earlier part of the job gets events From EVENT_LOG table and then populates the below tables:
INSERT INTO REOT_EVENT_EXTRA_DATA ..........
INSERT INTO REOT_EVENT_DYNAMIC_BUCKETS ............
INSERT INTO REOT_EVENT_STATIC_BUCKETS
 
A list of tables which are purged and added to during the course of the Offline Tasks (-not exhaustive):
REOT_BUCKET_AGGR_STATUS
REOT_EVENT_EXTRA_DATA
REOT_EVENT_DYNAMIC_BUCKETS 
REOT_EVENT_STATIC_BUCKETS
HC_CHALLENGE_RATE
HC_EVENT_DISTRIBUTION
HC_NORMALIZATION
RBA_SCORE_NORMALIZE_STAT
ENTITY_AGGREGATIONS
 
The high volume of deletions and insertions to these tables may result in an increased number of archive log generations.  Some DBAs may express concern around this activity.  An increase in the number and/or size of the archive logs allocated for the RSA Core database might be indicated here.  Please share this information with the Customer/DBA and offer to have a call to discuss this further if needed.
 

Attachments

    Outcomes