Audit log queries slow with increased audit retention regardless of query time frame
Last Updated June 13, 2014
Message audit log queries performed from the Symantec Messaging Gateway control center Status->Message Audit Logs page take the same length of time regardless of the time frame selected i.e. queries for messages within the last hour take as long as queries for messages within the last month. For installations with a long audit retention policy or large mail volumes, this can cause audit log queries to time out even when searching relatively narrow time frames.
This is known issue with the way in which audit log searches are performed.
This issue is being reviewed by Symantec for improvement in a future release.
Installations experiencing timeouts can either decrease audit log retention or search scanner hosts individually from the command line interface (CLI).
Please subscribe to this document to be automatically notified of updates.
Imported Document ID: TECH218326
Subscribing will provide email updates when this Article is updated. Login is required to Subscribe