Unable to clear large trace files
Under both EE 4.0.0 and the new 4.0.2, we're seeing odd behavior where large data pulls (300+ MB trace sizes) refuse to clear. Clicking clear data will generate a processing dialog box that runs for a while, but then the data is still there. Changing the trace file size also does not clear the data (fun to see nearly 500 MB of data in a 75 meg trace file ). The only solution is to copy the trace and delete the old one, which is a bit of a hassle.
Anyone else seeing this behavior?
For some reason the local HSQLDB used by the Event Explorer Client is running out of memory while clearing a large database. RSA Engineering is looking into it. In the meantime you should open a Tech Support incident with RSA to report your experience with this issue.
You might also consider using some filters on your Event Trace to limit the amount of data being transferred from the enVision server to your Event Explorer desktop session.