Notifications issue

[adamski]

Hello everyone,

after the Update to the 6.5 we are facing an annoying issue with the notifications (history/registry). The tables are filled very very fast again. After we had the login problem withe the message " Manager License not valid" we done the steps described below and everythings worked fine for a day 😕 .

So now my question is : do i have any chance to quickly find the cause of the problem ? Its a workaround to turncate but to restart the manager every day is not what we are going to do :-).

Deactivation of the notificaitions is not possible.

I would be happy about some Feedback .... if you need some more informations just ask for it.

Thx Kai

---------------------------------------------------------------------

"Manager license not vaild" issue --- solved !

1. Login to the server as the arcsight user.

2. Execute the following command from

/opt/arcsight/logger/current/arcsight/bin

./mysql -u arcsight -p

3. When prompted, enter the password for the arsight user.

4. Enter:

use arcsight;

5. Execute the following query at the mysql> prompt:

show table status like 'arc_not%';

Example Output:

arc_notification_history | InnoDB | xx| Compact | 3461124

| xxx| 387350528 | ...

arc_notification_registry | InnoDB | xx | Compact | 1671599

| xxx | 1534590976 | ...

NOTE: The size of the arc_notification_registry above is 1,534,590,976

(1.5GB) and it has 1,671,599 rows). These are large values for this table.

6. Truncate the tables, as follows:

a. Shutdown the Manager;

b. Enter the following commands at the mysql> prompt. (If necessary, login

again by repeating Steps 1-4 above.)

set foreign_key_checks=0;

truncate table arc_notification_history;

truncate table arc_notification_registry;

set foreign_key_checks=1;

exit

7. Start the Manager.

8. Login to the Console.