EPO 5.10 SQL DB filling up

[Former Member]

Hello,

Our SQL DB seems to be filling up our Disks at a rate of 40GB per Day.

we are shrinking via SQL but is there anyway in mcafee to deal with this.

[Hem]

You need to figure out the table which is feeling more. Please run query from KB76720.

Once we isolate which table is filling up more frequently then we can plan accordingly.

[Former Member]

Hello,

DB = EPO_Events =

EPOEvents = 3671810 Row Count

EPOEvents = 605075 Row Count

DB=EPO

EPOEventsRefrence = 1996885 Row Count

SCOR_EVENTS = 1399503 Row Count

Thanks,

[Hem]

Hi,

It looks like EPOEvents + SC tables has huge records.

Please isolate the events which are filling more frequently to EPOevents table.  KB83652

Based on event ID, you can Tune the product policy so that we will not have this much excessive event generation.

For help in tuning up the policy, please open SR with support.

[andrep1]

Other than the event table, the SC tables are for solidcore. Solidcore/Application Control can generate a huge amount of events, typically you have a lot of devices where the policy has not been tuned.