Re: [OpenXPKI-users] Cleaning obsolete database entries

[Martin B. <vc...@cy...>]

Hi,

> Is it safe to clear the application log and the workflow history manually from the database?

You can (and should) use regular logrotation on the log files, so they do not grow independently. Perform log file pruning to your liking and retain the desired backlog.

If you really wish to delete PKI workflow data you can do the following. Test this first thoroughly on a dev system.

It should be safe to delete from the workflow_history table without any repercussions.
Deleting workflow context entries from a workflow instance should be possible if the workflow will not be used again (is in a final state). If you delete workflow context entries of an 
Deleting workflows is a bit more tricky, you will have to first completely delete all dependent entries to not break things.

I advise against deleting certificates, but if you do so, you will also need to delete dependent certificate_attributes.

> Also is it possible to configure the level of logs?

All internal logging is done via Log4Perl, and the corresponding log configuration is located at /etc/openxpk/log.conf - adapt log levels and log targets to your liking.


Cheers

Martin