Symantec DLP Server Event and Agent Event Delete

1. Make a backup of your database before making any of the following changes.

2. On the Enforce Server: Stop the VontuManager and VontuIncidentPersister services.

3. Log into SQLPlus as the DLP user (default: protect).

For deleting system event between a specific date; (NOT Incidents)

4. delete from systemeventWHEREeventdate >= TO_DATE(’01-JAN-13′, ‘DD-MON-YY‘) ANDeventdate <= TO_DATE(’01-JAN-15′, ‘DD-MON-YY‘);

5. commit;

For deleting agent event between a specific date; (NOT Incidents)

1. Make a backup of your database before making any of the following changes.

2. On the Enforce Server: Stop the VontuManager and VontuIncidentPersister services.

3. Log into SQLPlus as the DLP user (default: protect).

4) select count(*) from systemeventWHEREeventdate >= TO_DATE(’01-JAN-13′, ‘DD-MON-YY‘) ANDeventdate <= TO_DATE(’01-JAN-15′, ‘DD-MON-YY‘);

5. truncate table agentevent;

6. comitt;