Question

Audit Trail 11 Update- Catalog consuming disc space

Audit Trail Version 11 Administration

Updated December 27, 2021

asked on December 20, 2021

Hello,

We just updated a customer LF System to 11 on Saturday and they sent us an email this morning with the following issue:

"C:\ProgramData\Laserfiche\AuditAnalytics\Catalogs is consuming as much space as it can get it’s hands on"

We upgraded AT from version 10 to 11.

I know that AT 11 does not use a DB to store data, but I cannot find anything in the help documentation, regarding space allocation for the data storage in AT 11, as all of the help files still show the following:

"This documentation is specific to version 10."

Has anyone else encountered this issue and if some what did you do to resolve it?

Appreciate the feedback,

Jeff Curtis

0 0

Answer

SELECTED ANSWER

replied on December 22, 2021 • Show version history

Hi Jeff,

Currently, customer cannot modify the default data range on the configuration page until AT completes the initial 12-month data indexing into the catalog. The catalog folder you mentioned above is indeed the LFFTS catalog but just for AT only, differ from the other LFFTS catalogs for repository search purpose. AT uses this specific LFFTS catalog to index all the audit events within the data range.

We can provide you the workaround to shrink the disk space by changing the data range from 12 months to 1 month as following:

Catalog detached
Delete folder "C:\ProgramData\Laserfiche\AuditAnalytics\Catalogs\{ServerName}\LFAudit_{RepoName}"
Stop Laserfiche Audit Trail Importing Service
Backup the file "%programdata%\Laserfiche\AuditAnalytics\profiles.json"
Open "%programdata%\Laserfiche\AuditAnalytics\profiles.json". It's an array for data sources. Find the section of the repository you added above by the field "repositoryName", then modify the value of "limitation" from 31104000 to 2592000 (seconds of 1 month)
Start Laserfiche Audit Trail Importing Service
Open configuration site, on search engine page, click "Attach" button

We will consider to support this requirement in the future release/patch so that customers can easily configure their data range at any time.

Regards,

Leon

1 0

Replies

replied on December 23, 2021

Hi Jeff-

Not exactly the answer you want, but after testing for a while I decided not to use Audit Trail 11 and stick with AT 10 even when the rest of the system is on version 11. A complication, if you run all from the same machine, is that AT Reporting 10 is part of the LF Server installation, so I don't think you can install it on a server with LF Server 11 and instead need to install it on a separate machine.

1 0

replied on December 20, 2021 • Show version history

Hi Jeff,

We noticed that you already found the disk space are mostly consumed by "Catalogs" folder, where Audit Trail 11 leverages Laserfiche Full-Text Search Engine (LFFTS) to index the audit events instead of DB for better audit report performance.

In order to save the disk space used by LFFTS, you can modify the "Data Age" in Audit Trail Configuration > Search Engine > Catalogs to a smaller number (months) after the initial data indexing is done.

Or you can just detach and move the Catalog folder to a bigger place before attaching it back on the same configuration page. Also, you can modify the "Default Catalog Folder" value to a bigger disk for further catalogs required.

More info in KB: https://support.laserfiche.com/kb/1014189/laserfiche-audit-trail-11-frequently-asked-questions-faq

Regards,

Leon

0 0

replied on December 22, 2021

Hello Leon,

Two issues per your comment:

1. Customer is unable to edit the data range, as the catalog is building and thus won't allow for settings to be altered. Even when detached they are unable to.

2. If this is using the LFFTS Catalog, why would updating AT increase the catalog size? After the update the build was consuming almost 200GB, which is way bigger than the LFFTS Catalog. Why is this growth so big? Customer cannot allocate this much drive space for Auditing. Is the only option to change the data range to shrink this?

Overall if the user is unable to edit the data range setting, could this mean the update though showing successful, hit an issue that we should try to do a Repair or Uninstall/Reinstall.

Appreciate the feedback,

Jeff Curtis

0 0

SELECTED ANSWER

replied on December 22, 2021 • Show version history

Hi Jeff,

We can provide you the workaround to shrink the disk space by changing the data range from 12 months to 1 month as following:

Catalog detached
Delete folder "C:\ProgramData\Laserfiche\AuditAnalytics\Catalogs\{ServerName}\LFAudit_{RepoName}"
Stop Laserfiche Audit Trail Importing Service
Backup the file "%programdata%\Laserfiche\AuditAnalytics\profiles.json"
Open "%programdata%\Laserfiche\AuditAnalytics\profiles.json". It's an array for data sources. Find the section of the repository you added above by the field "repositoryName", then modify the value of "limitation" from 31104000 to 2592000 (seconds of 1 month)
Start Laserfiche Audit Trail Importing Service
Open configuration site, on search engine page, click "Attach" button

We will consider to support this requirement in the future release/patch so that customers can easily configure their data range at any time.

Regards,

Leon

1 0

replied on December 27, 2021

Hello Leon,

Customer followed your provided steps and was able to Attach and finish the AT indexing without taking up a large chunk disc space.

Thanks Again,

Jeff Curtis

0 0

You are not allowed to follow up in this post.

Question

Question

Audit Trail 11 Update- Catalog consuming disc space

Answer

Replies

Sign in to reply to this post.