3 Replies Latest reply on Aug 13, 2013 9:57 AM by lta

    Syslog warning message

    ttl
    ttl Aug 12, 2013 11:50 AM

      This morning around 2:20am there is a Warning under the Events section in NPM:

       

      Syslog reached 9998039 rows, which is above warning threshold of 1000000. For more information, see SolarWinds Knowledge Base.

       

       

         I have performed the action recommended in the KB article (changing the dates to reflect deleting syslogs and traps older than 6 months), however when I execute the script it says

       

      (0 row(s) affected)

       

       

        So my question is, how do I fix this?

        • Re: Syslog warning message
          lta
          lta Aug 13, 2013 7:38 AM (in response to ttl)

          Hi,

           

          I have had this today only for traps, not a fix but a work around if you need to do it immediately, Here's what I did, rather than using the Database Management tool I logged onto the database server and used SQL Server Management Studio:

           

          First verify how many records you are going to delete (obviously substitute dbo.Traps for dbo.SysLog):

          • select count (*) from dbo.Traps where datetime <= dateadd(dd, datediff(dd,0, getDate()-7), 0);

           

          Once you are happy with the result replace select count (*) with delete, this will keep the last weeks records and delete everything beforehand.

           

          As the article says you need to then clean up the TrapVarBinds table (not relevant for yourself but I'll post anyway):

          • select count (*) from dbo.TrapVarBinds where TraID not in (select TrapID from Traps)

           

          will give the number of records to delete, again replace select count (*) with delete.

           

          HTH

          • Re: Syslog warning message
            lta
            lta Aug 13, 2013 9:57 AM (in response to ttl)

            No worries, happy to help!