How do I move the Log Archive Index processing location? (NETIQKB72195)

  • 7772195
  • 08-Apr-2010
  • 04-May-2010

Environment

Security Manager 6.0 SP3, SP4

Security Manager 6.5.x

Situation

The purpose of this article is to explain how to move the Log Archive Index processing to a different location on the file system.

Resolution

To move temporary index processing see the following steps:

  1. Log into your Log Archive Server.
  2. Open Windows Explorer.
  3. Browse to the following directory:

    C:\Documents and Settings\All Users\Application Data\NetIQ\Security Manager

  4. Open the following file:

    LogArchiveConfiguration.config

  5. Inside the LogArchiveConfiguration.config, look for the section listed below:

      <IndexingSettings>
        <PropertyList>
          <Property name="IndexJobCount" value="0" />
          <Property name="MaxIndexMemory" value="1024" />
          <Property name="AutoCommitIntervalMB" value="0" />
          <Property name="FieldDelimiterCharacter" value="|" />
          <Property name="MinAutoCommitIntervalMinutes" value="30" />
          <Property name="MaxAutoCommitIntervalMinutes" value="60" />
          <Property name="IndexJobCountLimit" value="16" />
          <Property name="MaxIndexerRestartsIn24HoursBeforeShutdown" value="5" />
          <Property name="DefragmentOnClose" value="false" />
          <Property name="DeleteIndexOnVerificationFailure" value="true" />
          <Property name="IndexJobTempDirectory" value="" />
          <Property name="MaxOutstandingIndexFiles" value="25000" />
        </PropertyList>

  6. The Property name that we need to modify is IndexJobTempDirectory. See the following example:

    <Property name="IndexJobTempDirectory" value="E:\LogArchiveIndexProcessing\"

  7. Save your changes to the LogArchiveConfiguration.config.
  8. Create the directory for the path entered as the value. (This directory will not be created automatically by the Log Archive Service)
  9. Restart the Log Archive Service.

Cause

There are situations, either due to performance or drive space concerns, that could require the temporary index processing is moved to another location in the file system.

Additional Information

Formerly known as NETIQKB72195

  • Maximum space requirements for the Log Archive Temporary Index processing is 32 Gigabits per indexing process. By default, we start one indexing process per CPU core. If you have 4 instances of the Log Archive Indexer processes, you could need up to 128 Gigabits of storage in the location that temporary indexing resides.
  • If the Log Archive Service does not restart after adjusting the LogArchiveConfiguration.config, verify that the value entered is encapsulated by double quotes.
  • If you are moving the data index processing location because if high disk IO issues, make sure to move it to a drive that is located on a different hard disk array.