Audit DB has increased drastically causing the application to shut down

[former_member546611]

Hello,

Suddenly the BO serve size has shoot up. Ee observed that there is around 26GB of files generated under Auditing folder for 13th July. And there is no activity that took place.Also on running the audit webi BO report ,we saw it was used by very less user and no such major activity performed.

Also what could have caused to generate such huge files

Thanks,

Hetal

[former_member240871]

Hi,

Could you check a small sample of those files (5-10 files) for the following properties:

• The second column is almost purely 1004 (Prompt)
• The last column repeats the prompts in the report over and over

If so, you're running into this issue:

https://launchpad.support.sap.com/#/notes/2550505

Cheers,
Leslie

[former_member546611]

Hello Leslie,

Yes,I checked the files and the second columns is for 1004.

And yes we have a report which is scheduled to run every hour and it takes nearly 30 min to run. Maybe this report is causing the issue?

[former_member185603]

Based on the screenshot, it looks like audit processing is up to date. The server mentioned above, may be in stopped state.

Check this below KB to troubleshoot the auditing issues.

2341344 - How to Investigate Auditing Issues with Targeted Tracing

[former_member185603]

And also using SQL Anywhere DB is not recommended to use in production systems.

[former_member185603]

Do you see Auditing is processed date in CMC->Auditing? Is your auditing APS is running ?

After checking the logs, check with your DBA and see if there is any issues with Audit Schema? May be they need to increase table space or something like that?

[former_member546611]

Auditing thread utilization is showing as 2.

This means that some of the audit files were not written into Audit DB.

Can you please let me know what should be the next steps

[denis_konovalov]

Well, what do those logs show ?

[former_member546611]

Hello,

Sorry there is not an increase in audit logs but under auditing folder placed (Updated the question)

C:\Program Files (x86)\SAP BusinessObjects\SAP BusinessObjects Enterprise XI 4.0\Auditing

Inside this folder there is around 26GB of data that was generated on 13th July

[denis_konovalov]

If there is a large number of txt files in that location you can :
a. looks into them and see what they are related to (by querying the Infostore on CUID's found in those files
b. Your CMS server could have had problems committing data into audit DB and cleaning those files up - so, you should review your Audit DB logs as well as event logs on the server.