KB 340114

KB 340114: Partitions not being groomed and/or multiple partitions have status = 1

ACS Event Partitions don't get indexed and/or convert status for grooming, leads to unexpected data growth and ACS health issues.

Issue: Partitions do not groom correctly

Symptoms: More Partitions than specified in your grooming policy or multiple partitions with a status code = 1

Cause: Index job does not complete and leaves partition in transition status which does not get processed by grooming job

Scope: Any ACS SP1 environment not running Microsoft KB 949969

Product/s: Audit Collection Service

Implement Microsoft ACS hotfix 949969

Scenarios that can result in index jobs failing:

1. Common when using SQL Standard and/or have SCOM and ACS on same physical SQL server.

2. Can also occur during periods of high event activity that cause partitions to grow to sizes that cannot be indexed properly during regular maintenance.

Health Checks

Check Partition Retention Policy:
SELECT [Value] FROM [dbo].[dtConfig] WHERE ID = 6

Check # of Partitions in Database:
SELECT * FROM [dbo].[dtPartition]

Update InActive Partitions:
UPDATE [dbo].[dtPartition] SET [Status] = 2 WHERE Status = 1