000035763 - Reducing EVENT_LOG history in RSA Adaptive Authentication (OnPrem)7.3

Document created by RSA Customer Support Employee on Dec 8, 2017
Version 1Show Document
  • Comment • 0
  • View in full screen mode

Article Content

Article Number000035763
Applies ToRSA Product Set: Adaptive Authentication (OnPrem)
RSA Product/Service Type: Adaptive Authentication (OnPrem)
RSA Version/Condition: 7.3
Platform: CentOS
O/S Version: 6
 
IssueAs discussed in our call, currently offline tasks are purging records in EVENT_LOG more than 180 days. We are planning to reduce EVENT_LOG table history from 180 days to 120 or 90 days. Can you create a case to analyze possible impacts on Risk Score/Risk Analysis if we go for this change? Here is some statistics for Risk Score usage inside Rules in Production status: Org Total # of Prod Rules Total # of Prod rules using Risk Score in their condition Org 1 26 10 Org 2 13 5
ResolutionEngineering provided this to be run from sql plus as schema owner to purge the EVENT_log table.
Please run this when the offline task is not running. You can run this online, no need to take an outage.
This should not take that long. This should reduce the size to 120 days.
You can run this in production before upgrading to 7.3 to reduce the EVENT_LOG to 120 days.
No need to purge any other tables. Please test it and let me know if there are any questions.
declare
 

v_in_table_name VARCHAR2(50) := 'EVENT_LOG';
v_in_days_to_keep NUMBER := 120;
v_in_current_date DATE := SYSDATE;
v_out_success NUMBER;
v_out_err VARCHAR2(250);
begin
"RSA_CORE"."RE_CLEANUP_PARTITIONS"
(
v_in_table_name,
v_in_days_to_keep,
v_in_current_date,
v_out_success,
v_out_err
);
--
DBMS_OUTPUT.PUT_LINE('Success : '||v_out_success);
DBMS_OUTPUT.PUT_LINE('Error : '||v_out_err);
end;
/

Attachments

    Outcomes