Introduction
This document describes how to delete the associated tracking or reporting databases stored on your Cisco Email Security Appliance (ESA) or Cisco Security Management Appliance (SMA).
How do I clear the tracking or reporting database?
Tracking Database
The tracking database is comprised of tracking logs for the appliance. Tracking logs record actions associated with the processes of the tracking service. Tracking logs are a subset of the mail logs.
Caution: This command will delete all tracking data and cannot be reverted.
From the CLI, use diagnostic > tracking > deletedb to clear the tracking database. No commit is necessary.
mylocal.esa> diagnostic
Choose the operation you want to perform:
- RAID - Disk Verify Utility.
- DISK_USAGE - Check Disk Usage.
- NETWORK - Network Utilities.
- REPORTING - Reporting Utilities.
- TRACKING - Tracking Utilities.
- RELOAD - Reset configuration to the initial manufacturer values.
[]> tracking
Choose the operation you want to perform:
- DELETEDB - Reinitialize the tracking database.
- DEBUG - Gather debug information.
[]> deletedb
This command will delete all tracking data and cannot be aborted.
In some instances it may take several minutes to complete. Please
do not attempt a system restart until the command has returned.
Are you sure you want to continue? [N]> y
Deleting all tracking data.
Shutting down the Splunk daemon (this may take a few minutes)...
Splunk daemon shut down
Removing Splunk database...
Splunk database removed
Removing 'missing data' database...
Removing unparsed log files...
Unparsed log files removed
Rebuilding log file directory...
rebuilt log file directory
Restarting the Splunk daemon (this may take a few minutes)...
Splunk daemon started
Reporting Database
The reporting database is a propietary binary database that contains historical metrics about mail flow for the appliance.
Caution: This command will delete all reporting data and cannot be reverted.
From the CLI, use diagnostic > reporting > deletedb to clear the Reporting database. No commit is necessary.
myesa.local> diagnostic
Choose the operation you want to perform:
- RAID - Disk Verify Utility.
- DISK_USAGE - Check Disk Usage.
- NETWORK - Network Utilities.
- REPORTING - Reporting Utilities.
- TRACKING - Tracking Utilities.
- RELOAD - Reset configuration to the initial manufacturer values.
[]> reporting
The reporting system is currently enabled.
Choose the operation you want to perform:
- DELETEDB - Reinitialize the reporting database.
- DISABLE - Disable the reporting system.
[]> deletedb
This command will delete all reporting data and cannot be aborted. In some instances
it may take several minutes to complete. Please do not attempt a system restart
until the command has returned. Are you sure you
want to continue? [N]> y
Shutting down reporting system......
Removing all reporting data. This may take several minutes.
The reporting system database has been reinitialized.
The reporting system is currently enabled.
Related Information
Feedback