18 July,19 at 06:33 AM
When a session starts (i.e. user logs onto a unix machine), the head record of the session is created in currently active Audit Store database. If the active Audit Store database is changed(database rotated) while this session is still active, it ends up splitting the session into two databases.
The issue comes when the database which contains the head record of the session is detached, then Audit Analyzer console fails to find the session's head and hence shows two errors,
error#1 - Dialog box that shows the 'session data is missing' error when try to replay the session; and
error#2 - Shows session's current review status as 'unavailable'.