Versions Compared

Key

  • This line was added.
  • This line was removed.
  • Formatting was changed.

...

The JS7 - Audit Log holds information about any operation performed which changes the state of an object, such as deploying objects, adding orders etc. Depending on the number of deployments and interventions related to order execution, the audit log can grow to some considerable size.

In addition, the Audit Log holds the History of Failed Logins that can be used to identify reasons for unsuccessful logins and to identify attacks from repeatedly failed logins.

Organizations which are subject to compliance requirements should check if retention periods before for purging the audit log Audit Log and History of Failed Logins meet their needs.

Cleanup Identity Services

The JS7 - Identity Services manage accounts that hold JS7 - Profiles.

For accounts that have not been used for a longer time the user profiles are purged. This does not prevent users from logging in at any later point in time, instead it prevents garbage from unused user profiles.

Configuration

Location

  • The "Settings" menu can be accessed in the JOC Cockpit GUI.

...

SectionSettingDefaultRequiredPurpose
cleanuptime_zoneUTCnoSpecifies the time zone that is applied to the start time and period of the Cleanup Service

period
noSpecifies weekdays on which the Cleanup Service is performed. The first day of week is assumed to be Monday. When initially installing JS7 then the distribution includes the value: 1,2,3,4,5,6,7. Without this setting the Cleanup Service will not start.

period_begin01:00:00noSpecifies the start time of the Cleanup Service for the given period, e.g. on a daily basis.

period_end04.00:00noSpecifies the end of the period which the Cleanup Service is allowed to run for. If the Cleanup Service completes its task first then it will stop before the indicated time. However, it will not continue to run beyond the indicated time. 

batch_size1000noSpecifies the number of records that are purged within a single transaction. Increasing this value can improve performance - at the same time it will increase the risk of conflicts with concurrent transactions if Services are operating on the database in parallel.

order_history_age90dnoSpecifies the retention period for the execution history of orders and tasks. Any history entries older than the value specified will be purged.

order_history_logs_age90dnoSpecifies the retention period for orders and task logs. Any logs older than the value specified will be purged. Note that this value should not exceed the value of the cleanup_order_history_age setting as otherwise navigation to logs cannot be provided by the JOC Cockpit GUI.

file_transfer_history_age90dnoSpecifies the retention period for file transfer history entries. Any entries older than the value specified will be purged.

daily_plan_history_age30dnoSpecifies the retention period for the history of submissions with the Daily Plan. Any history entries older than the value specified will be purged.

deployment_history_versions10noSpecifies the number of versions per deployed object that should be retained. Such versions can be used to re-deploy an object from an earlier state. Any earlier deployed versions of deployed objects are removed.

audit_log_age90dnoSpecifies the retention period for the Audit Log. Any audit log entries older than the value specified will be purged.

monitoring_history_age1dnoSpecifies the retention period for entries in the Monitor view. As this suggests to be a tactical view longer retention periods are not recommended.

notification_history_age1dnoSpecifies the retention period for notifications, e.g. about job errors and warnings. As notifications are typically handled on the same day longer retention periods are not recommended.

profile_age365dnoSpecifies the retention period for unused profiles, i.e. profiles of user accounts that did not login for the given period.

failed_login_history_age90dnoSpecifies the retention period for the history of failed logins. Unsuccessful logins that occurred before the given period will be purged.

Logging

  • The Cleanup Service logs general messages, warnings and errors to the joc.log file.
  • More detailed information is additionally logged in the Main Log service-cleanup.log file.
  • In addition to the Main Log, detailed debug information is logged in the Debug Log service-cleanup-debug.log file.
  • For details see the JS7 - Log Files and Locations article.

...