Hello AM,
You can clear many different ways. Below you will see the commands used to clear
the database. These commands work with Full version SQL and MSDE2000.
WARNING: This solution requires that you edit your SQL or MSDE database. Incorrectly
editing your database may cause severe and irreparable damage and may require you to
reinstall your database. It is recommended that you backup your database before
performing any edit to it. Editing of your database should only be performed by a SQL
database administrator, or similarly qualified individual. If you are not familiar
with SQL or MSDE, do not attempt this operation! Internet Security Systems cannot
guarantee that problems resulting from incorrectly editing your database can be
solved. Proceed at your own risk.
NOTE: You must be logged in with local administrator privileges on the MSDE or SQL
machine or the following procedures will not work. Before performing any maintenance
on your database, you must first shutdown the Event Collector to prevent damage to the
database. Restart the Event Collector only after you have completed the maintenance.
To PURGE the ISSED, do the following:
Open a command prompt from the machine running MSDE.
Type osql -E and press enter; 1> is displayed.
Type use issed and press enter; 2> is displayed.
Type exec iss_purgeevents '1/1/2002 00:00:00','12/31/2002 00:00:00',100 and press
enter; 3> is displayed. NOTE: The date and time will need to be modified so that the
command will only clear a specific date range. The command above will clear anything
entered in the database between January 1, 2002 at midnight, and December 31, 2002 at
midnight.
Type go and press enter; 1> is displayed.
The specified event range has now been cleared from the ISSED database.
To CLEAR the ISSED, do the following:
Open a command prompt from the machine running MSDE.
Type osql -E and press enter; 1> is displayed.
Type use issed and press enter; 2> is displayed.
Type exec iss_truncateevents and press enter; 3> is displayed.
Type go and press enter; 1> is displayed.
All events have now been cleared from the ISSED database.
To SHRINK the ISSED, follow these steps:
Open a command prompt from the machine running MSDE.
Type osql -E and press enter; 1> is displayed.
Type dbcc shrinkdatabase (issed,0) and press enter, 2> is displayed.
Type go and press enter, 1> is displayed.
The ISSED data file has been reduced to it's minimum size. NOTE: When using the MSDE
on a system with limited disk space, it may be a good idea to leave the data file at
it's maximum size. This will ensure that other applications do not allocate the space
that is need for the data file to grow to it's maximum size.
To INCREASE THE MAXIMUM SIZE of the ISSED, do the following:
Open a command prompt from the machine running MSDE.
Type osql -E and press enter; 1> is displayed.
Type alter database issed modify file (name=issdata, maxsize=2gb) and press enter; 2>
is displayed.
Type go and press enter; 1> is displayed.
The maximum size of the ISSED database has been increased to two gigabytes. NOTE: This
is the upper limit for the size of an MSDE database. SQL Server provides a more robust
database, and allows the database to grow to fill the disk, if specified. Under no
circumstance should you increase the maximum size of an MSDE database to more than two
gigabytes. Data corruption and loss will occur.
To INCREASE THE MAXIMUM SIZE of the ISSED transaction log, do the following:
Open a command prompt from the machine running MSDE.
Type osql -E and press enter; 1> is displayed.
Type alter database issed modify file (name=isslog, maxsize=2gb) and press enter; 2>
is displayed.
Type go and press enter; 1> is displayed.
The maximum size of the ISSED transaction log has been increased to two gigabytes.
NOTE: This is the upper limit for the size of an MSDE database. SQL Server provides a
more robust database, and allows the log to grow to fill the disk, if specified. Under
no circumstance should you increase the maximum size of an MSDE database to more than
two gigabytes. Data corruption and loss will occur.
To BACKUP the ISSED database, follow these steps:
NOTE: Please ensure that the directory "c:\program files\microsoft sql
server\mssql\backup\" exists before beginning!
Open a command prompt from the machine running MSDE.
Type osql -E and press enter; 1> is displayed.
Type use master and press enter; 2> is displayed.
Type exec sp_addumpdevice 'disk', 'issedbackup', 'c:\program files\microsoft sql
server\mssql\backup\issed.bak' and press enter; 3> is displayed.
Type backup database issed to issedbackup and press enter; 4> is displayed.
Type go and press enter; 1> is displayed.
The ISSED database has been backed up.
To RESTORE the ISSED from backup, follow these steps:
Open a command prompt from the machine running MSDE.
Type osql -E and press enter; 1> is displayed.
Type restore database issed from issedbackup and press enter; 2> is displayed.
Type go and press enter; 1> is displayed.
The ISSED database has been restored from backup.
To CHANGE the EventCollector or other SQL password, follow these steps:
Open a command prompt from the machine running MSDE.
Type the following: EXEC sp_password NULL, 'password', 'EventCollector' (where
'password' is the new password you would like to set and 'EventCollector' can be
interchanged with any account you which to set a new password on)
Further OSQL commands can be found HERE.
Regards,
=============================================================================================================================
Eric P. York
Escalation Engineer
Internet Security Systems - The Power To Protect
Phone: (404)-236-2700 or 888-447-4861
Email: [EMAIL PROTECTED]
***PLEASE NOTE: With the recent availability of the True Blue Customer Support
Center, this is now the preferred method of electronic communication for all North
American customers. Submitting incidents, viewing and updating status of incidents
should be done via the True Blue Customer Support Center located at http://my.iss.net
.
For more information, please visit the help page at
https://www.iss.net/issEn/MYISS/login_help.jhtml.
Customers located outside of North America should continue to use
[EMAIL PROTECTED] <mailto:[EMAIL PROTECTED]>. Though [EMAIL PROTECTED] is still
available
to North American customers, we strongly recommend using the True Blue Customer
Support Center.
ISS REFERENCE LINKS:
ISS Home Page: http://www.iss.net/
ISS Download Center: http://www.iss.net/download/
ISS KB & FAQ: http://www.iss.net/customer_care/knowledgebase
Join ISS mailing lists at:
http://www.iss.net/security_center/maillists
NOTICE: This communication may contain privileged or other confidential information.
If you are not the intended recipient, or believe that you have received this
communication in error, please do not print, copy, retransmit, disseminate, or
otherwise use the information. Also, please indicate to the sender that you have
received this communication in error, and delete the copy you received. Thank you.
-----Original Message-----
From: Eduardo Palacio Osorio [mailto:[EMAIL PROTECTED]
Sent: Thursday, September 04, 2003 5:21 PM
To: aida mseddi; [EMAIL PROTECTED]
Subject: Re: [ISSForum] event collector error
Aida
Use this link:
http://www.iss.net/support/product_utilities/realsecure_tech_center/utilities/index.php
Download dbms.msi, install and execute.
Hope this helps.
Regards
Eduardo
----- Original Message -----
From: aida mseddi
To: [EMAIL PROTECTED]
Sent: Thursday, September 04, 2003 10:20 AM
Subject: [ISSForum] event collector error
Hi to all,
I�m having a trouble with a EventCollector .
We receive an error message from the event collector
"fatal error data base is full
how can I delete the data of the data base.
Thanks.
AM
_______________________________________________
ISSForum mailing list
[EMAIL PROTECTED]
TO UNSUBSCRIBE OR CHANGE YOUR SUBSCRIPTION, go to
https://atla-mm1.iss.net/mailman/listinfo
