Question & Answer
Question
How can you change the Guardium aggregator merge period and audit reporting period? You may want to do this in order to run reports that queries for data beyond the default merge period.
Answer
1. set the new values for merge_period and max_audit_reporting with the following cli commands:
store aggregator merge_period <new_value>
store max_audit_reporting <new_value>
where first command will change the aggregator merge period and second command will change the maximum number of days an audit report can query.
Example, the following commands will set the both values to the last 45 days:
store aggregator merge_period 45
store max_audit_reporting 45
with the first command, the last 45 days will be included in the aggregator's merge period and reports can query this data. The second command indicates that audit reports may include data as old as 45 days.
2. confirm the new values, for example:
> show aggregator merge_period
start (days ago): 45
end (days ago): 0
ok
> show max_audit_reporting
Maximal audit reporting (in days): 45
ok
3. Restart the GUI for the new values to take effect:
restart GUI
Was this topic helpful?
Document Information
Modified date:
16 June 2018
UID
swg21653110