Hi there,
querying Micrsosft Collecting Auditng System after stopping it for a long time, makes MSACS unavailable because enVision locks the table of SQL Server and MSACS fills up the own queue until it has to discard events when, it can't push events anymore.
Our MSACS systems collects a lot of events (up to 4000000/h), if for some reasons MSACS stops working the first query runs for hours before to terminate.
How can I set up my enviroments in order to avoid this situation?
Thanks.
