Archieve sys audit

[Ak Islam]

Hi,

Just wondering if I can archive audit data (sys_audit). Seems like this table is not available for selection in the archive rules section.

Any help will be appreciated.

Thanks

Ak

[HarshTimes]

Hi sergiu.panaite / @amdadul

Based on the servicenow theory

I think in table rotation,the data does not remain permanently,It remains till the table rotation engine finish writing data to last table in the rotation setup. Once the last table is full then the table rotation engine starts overwriting the first table.

Below are the notes from servicenow

"Table Rotation preserves instance performance and averts risk associated with querying growing data sets by using the External Communication Channel (ECC) Queue and the sys_created_on field to separate data sets into multiple tables based on date. The administrator specifies the time parameter (Duration) of the process and the number of tables (Rotations) within. After the rotation writes the last table in a rotation, the rotation overwrites the first table in the rotation"

Please find the below link for more information

Table Rotation - ServiceNow Wiki

[sergiu_panaite]

harshtimes I think you're missing the concept of table extension. While still present in Table Rotation functionality the extension doesn't rotate tables (shards) just extends them by creating a new one every X number of days. Audit and Email are the 2 tables that are automatically in this category. Have a look here:

Use table extension