Event Viewer EVENTS from Solarwinds

Question

can anyone recommend a remedy for these two reoccurring Events in Solarwinds Orion?

TrapService_1027_W: There was an error deleting old message from the database Error Detail-Timeout expired. The timeout period elapsed prior to completion of the operation or the server is not responding. The statement has been terminated.

SyslogService_1027_W: There was an error deleting old message from the database Error Detail-Transaction (Process ID 101) was deadlocked on lock resources with another process and has been chosen as the deadlock victim. Rerun the transaction.

byrona · Answer

I am receiving these errors in my Eventlog, however; my neither my Syslog or Trap table is very big.  What else will cause these errors?

Yann · Answer

Hi,

I further detailed the info already provided here:

So basically how can I instruct SW to backup and then truncate the syslog and trapvarbind tables after 1Gb is reached or let's say every 30 days?

You could schedule a T-SQL script to run on a regular basis and perform the above steps if Table size is above 1GB.

Same thing if you see data older than 30 days. Ensure the Trap retention setting is higher than 30 days in that case to not interfere.

Or alternativelly if some device starts hammering the SW with traps how can I tell it to reject more than X amount  of messages per certain amount of time.

This does not seem to be possible using the Trap viewer features.

You should discard traps that are not required and only accept those you really need to collect.

HTH,

Yann

pgb205 · Answer

I've had the same problem and your solution worked, Yann. thank you very much.

However, I would like to keep the traps and syslog messages forever even if in offisite storage if sql database can't handle that much data.

So basically how can I instruct SW to backup and then truncate the syslog and trapvarbind tables after 1Gb is reached or let's say every 30 days?

Or alternativelly if some device starts hammering the SW with traps how can I tell it to reject more than X amount  of messages per certain amount of time.

thank you