McAfee ENDPOINT ENCRYPTION ENTERPRISE - BEST PRACTICES GUIDE, Manual

Page: 20 / 26

20
To export and then clear ALL user audits use this command:
SBADMCL –Command:DumpUserAudit –Adminuser:Admin –Adminpwd:mypassword –
File:c:\dump\Dumpuser.txt –Group:* –clear
To export and then clear ALL machine audits use this command:
SBADMCL –Command:DumpMachineAudit –Adminuser:Admin –Adminpwd:mypassword –
File:c:\dump\DumpMachine.txt –Group:* –clear
To export and clear ALL user audits 90 days and older use this command:
SBADMCL ‐ Command:DumpUserAudit ‐ Adminuser:Admin ‐ Adminpwd:mypassword ‐ Group:* ‐
File:c:\Dump\DuUserAu90.txt ‐ ClearDaysold:90
To export and clear ALL machine audits 90 days and older use this command:
SBADMCL –Command:DumpMachineAudit –Adminuser:”Admin” –Adminpwd:”mypassword” –
File:DuMachAu90.txt –Group:* –ClearDaysOld:90
For further analysis of the Audit see the Advice on handling audit document.
To export and clear from a specific group add the group name instead of *
Deleted Items Cleanup
As mentioned previously clearing objects from Deleted Items (found through the System tab in McAfee
Endpoint Encryption Manager) can aid Object Directory access speed. When the deleted items are emptied,
the actual physical folder for the object within the Object Directory is renamed. The extension of the folder is
renamed from .RMV to .WPE. With a very large database, these empty/removed folders can sometimes slow
down searches.
In a test lab, try removing .WPE folders and test search speeds. If an improvement is found, it may be worth
repeating on the live Object Directory. Always ensure tests and full backups are performed before any
procedure.
Checking for Database Corruption
Why does the database get corrupted?
Corruptions can be caused by failed installations and bad sectors on endpoint systems or unsupported
procedures, disconnected network links to the Object Directory* or failing drives and so on.
Poor or slow access to the Object Directory can cause a slow or intermittent access to the database. This can
cause the Object Directory to corrupt during database operations. Endpoint installations can fail and cause
corruption. In addition, as a consequence, corrupted objects can cause a corrupted index, and to complete the
circle this can also cause corrupted objects themselves. Slowness of the disk access can be a problem when
using shared resources SAN or NAS connections rather than DAS.
See the document Server and Object Directory Optimization section above for detailed information about the
performance settings.
*More robust in v5 Release 5701 onwards.