Symantec Privileged Access Management

Hi CA,

We manage more than 190 endpoints, but we have noticed that tibco queue is not process the queue/audit events on ENTM.

WE would need to know how to investigate deeper about TIBCO event queue, even server tells that is processing events for this endpoint.

We try connect to: ssl://localhost:7243 and run the command "show queues", we find the msgs of count is 10005, just like below screen:

Does any way to clear the message queue or fix the issue?

Good day! Your question though simple has some 'strings' attached to it. The queue/audit is used primarily for Audit data from the endpoint and PUPM. This is used primarily when integrated with UARM for reporting or certain business needs that vary based on your requirements.

That being said, if you are aware you do not need this information you can connect to the tibco via ssl://localhost:7243 and run the 'purge queue queue/audit' which will clear this queue and is readily seen via -h or help on NT. Thus additionally, you can modify the maximum size and overflow.

'setprop queue queue/audit maxbytes=2MB, overflowPolicy=default|discardOld|rejectIncoming'

Please let me know if this answers your question. There is also a tecdoc related to this linked below.

Knowledge Base Articles