Thumbprint issue with large database and backlog tpd files alerts "thumbprint databases are stale"

03/26/2020 1063 11755

DESCRIPTION:

CAUSE:

-Some times, if too many signatures are pushed from our back-end due to high volume of spam that we need to stop, the device may lag behind in updating those signature/ ( tpd files) to be merged into the database.

- This backlog files will generate the "thumbprint databases are stale" alerts

RESOLUTION:

-During this time, you will see alerts saying " thumbprint database is stale"

-Typically in this situation, if the total database sizes are less then 5 to 6GB ( XB database is less then 3 GB) you can do a restart of services a couple of times during the day to speed up the process of tpd files rolling faster and wait it out to clear the backlog.

- It may take upto 2-3 days to clear the backlog sometimes ( column "TPD files Pending)( if more then 400 files are pending in tpd, this is normal and you will receive alerts during that time )

- If your database sizes are more then 6GB over all and ( more then 3 GBb for XB database) you can do a rebuild of the database to clear the backlog and fix the problem.

Please follow this article to do the rebuild on thumbprint/mysql database: https://support.sonicwall.com/sonicwall-email-security/kb/sw5249