Thumbprint issue with large database and backlog tpd files alerts "thumbprint databases are stale"

03/26/2020 1,064 People found this article helpful 195,532 Views

Download

Print

Share

• LinkedIn
• Twitter
• Facebook
• Email
• Copy URL The link has been copied to clipboard

Description

Cause

-Some times, if too many signatures are pushed from our back-end due to high volume of spam that we need to stop, the device may lag behind in updating those signature/ ( tpd files) to be merged into the database.

- This backlog files will generate the "thumbprint databases are stale" alerts

Resolution

-During this time, you will see alerts saying " thumbprint database is stale"

-Typically in this situation, if the total database sizes are less then 5 to 6GB ( XB database is less then 3 GB) you can do a restart of services a couple of times during the day to speed up the process of tpd files rolling faster and wait it out to clear the backlog.

- It may take upto 2-3 days to clear the backlog sometimes ( column "TPD files Pending)( if more then 400 files are pending in tpd, this is normal and you will receive alerts during that time )

- If your database sizes are more then 6GB over all and ( more then 3 GBb for XB database) you can do a rebuild of the database to clear the backlog and fix the problem.

Please follow this article to do the rebuild on thumbprint/mysql database: https://support.sonicwall.com/sonicwall-email-security/kb/sw5249

Related Articles

• Network Security Essentials eLearning Training Course
• How do I check if syslogs are getting forwarded by an Email Security Appliance?
• How to add inbound path in Hosted Email Security

Categories

• Email Security > Email Security Appliance
• Email Security > Email Security Software
• Email Security > Hosted Email Security