简介
本文档介绍如何删除存储在思科邮件安全设备(ESA)或思科安全管理设备(SMA)上的关联跟踪或报告数据库。
如何清除跟踪或报告数据库?
跟踪数据库
跟踪数据库由设备的跟踪日志组成。跟踪日志记录与跟踪服务的进程关联的操作。跟踪日志是邮件日志的子集。
注意:此命令将删除所有跟踪数据,且无法恢复。
在CLI中,使用diagnostic > tracking > deletedb清除跟踪数据库。无需提交。
mylocal.esa> diagnostic
Choose the operation you want to perform:
- RAID - Disk Verify Utility.
- DISK_USAGE - Check Disk Usage.
- NETWORK - Network Utilities.
- REPORTING - Reporting Utilities.
- TRACKING - Tracking Utilities.
- RELOAD - Reset configuration to the initial manufacturer values.
[]> tracking
Choose the operation you want to perform:
- DELETEDB - Reinitialize the tracking database.
- DEBUG - Gather debug information.
[]> deletedb
This command will delete all tracking data and cannot be aborted.
In some instances it may take several minutes to complete. Please
do not attempt a system restart until the command has returned.
Are you sure you want to continue? [N]> y
Deleting all tracking data.
Shutting down the Splunk daemon (this may take a few minutes)...
Splunk daemon shut down
Removing Splunk database...
Splunk database removed
Removing 'missing data' database...
Removing unparsed log files...
Unparsed log files removed
Rebuilding log file directory...
rebuilt log file directory
Restarting the Splunk daemon (this may take a few minutes)...
Splunk daemon started
报告数据库
报告数据库是一个专有二进制数据库,包含有关设备邮件流的历史度量。
注意:此命令将删除所有报告数据,且无法恢复。
从CLI使用 Diagnostic > Reporting > Deletedb 以清除报告数据库。 无需提交。
myesa.local> diagnostic
Choose the operation you want to perform:
- RAID - Disk Verify Utility.
- DISK_USAGE - Check Disk Usage.
- NETWORK - Network Utilities.
- REPORTING - Reporting Utilities.
- TRACKING - Tracking Utilities.
- RELOAD - Reset configuration to the initial manufacturer values.
[]> reporting
The reporting system is currently enabled.
Choose the operation you want to perform:
- DELETEDB - Reinitialize the reporting database.
- DISABLE - Disable the reporting system.
[]> deletedb
This command will delete all reporting data and cannot be aborted. In some instances
it may take several minutes to complete. Please do not attempt a system restart
until the command has returned. Are you sure you
want to continue? [N]> y
Shutting down reporting system......
Removing all reporting data. This may take several minutes.
The reporting system database has been reinitialized.
The reporting system is currently enabled.
相关信息