|Applies To||RSA Product Set: Adaptive Authentication (OnPrem)|
RSA Product/Service Type: Adaptive Authentication (OnPrem)
RSA Version/Condition: 7.x
|Issue||Some AA Customers or DBAs may have questions similar to the following. We are seeing two insert statements causing more archive log generations on the RSA database during the nightly offline tasks. We would like to know if this is an expected behavior or something we need to address? Here are the Insert Statements: INSERT INTO REOT_EVENT_DYNAMIC_BUCKETS (EVENT_SEQUENCE, USER_HASH, SHORT_DATE, CATEGORY_ID, BUCKET) VALUES (:1 , :2 , :3 , :4 , :5 ) and INSERT INTO REOT_EVENT_EXTRA_DATA .|
|Tasks||Verify that the time period mentioned in the case notes falls within the nightly offline task jobs as defined in the Scheduler.|
|Resolution||Provide the following explanation/response:|
The high level of activity on those tables and the ones listed below is expected behaviour when the nightly risk engine Offline Tasks are running. Specifically, the earlier part of the job gets events From EVENT_LOG table and then populates the below tables:
INSERT INTO REOT_EVENT_EXTRA_DATA ..........
INSERT INTO REOT_EVENT_DYNAMIC_BUCKETS ............
INSERT INTO REOT_EVENT_STATIC_BUCKETS
A list of tables which are purged and added to during the course of the Offline Tasks (-not exhaustive):
The high volume of deletions and insertions to these tables may result in an increased number of archive log generations. Some DBAs may express concern around this activity. An increase in the number and/or size of the archive logs allocated for the RSA Core database might be indicated here. Please share this information with the Customer/DBA and offer to have a call to discuss this further if needed.