Tips for finding Knowledge Articles

  • - Enter just a few key words related to your question or problem
  • - Add Key words to refine your search as necessary
  • - Do not use punctuation
  • - Search is not case sensitive
  • - Avoid non-descriptive filler words like "how", "the", "what", etc.
  • - If you do not find what you are looking for the first time,reduce the number of key words you enter and try searching again.
  • - Minimum supported Internet Explorer version is IE9
Home  >

KB-2280: How do I check the size of an audited session?

Auditing and Monitoring Service ,  

13 July,17 at 09:39 PM

Applies to: Centrify DirectAudit version 2.X on Windows

How do I check the size of an audited session and delete old sessions?

Run the following query on the auditstore in Microsoft SQL Server Management Studio:

SELECT a.machinename,a.starttime,SUM(LEN(b.terminaldata)) AS session_size
FROM session AS a
INNER JOIN rawdata AS b
ON a.sessionid=b.sessionid
GROUP BY a.sessionid,a.machinename,a.starttime
ORDER BY session_size DESC

Once you have sorted the larger sessions you can delete each those session by using the start time as a filter:

delete from session where starttime='2013-04-29 14:15:44.610'