Manage the Syteca database over its lifetime. Configure Archive and Cleanup operations, clean up sessions left behind by deleted Clients, and tune PostgreSQL autovacuuming to keep the database healthy under sustained write load.
Ongoing Syteca database management covers three operational concerns. Reclaiming space through Archive and Cleanup operations. Tidying the database when Clients are removed and their sessions remain behind. Keeping PostgreSQL databases performing well through automatic vacuuming. This page documents the parameters and procedures for each.
NOT AVAILABLE IN SAAS. Database management is on the on-premises Syteca database. In SaaS deployments, the Syteca vendor manages the database including all Archive and Cleanup operations, deleted-Client tidying, and PostgreSQL maintenance.
Archive and Cleanup operations move older session data out of the primary Syteca database. The Cleanup operation removes it entirely; the Archive and Cleanup operation moves it to a separate archived database first, then removes it from the primary database. Both operations share a set of parameters configured on the Configuration page.
Parameters applied to Archive & Cleanup for both PostgreSQL and MS SQL Server
These parameters are needed when the Archive & Cleanup operation is used. They point Syteca at the archive destination.
Parameter
Purpose
Instance
The path to the PostgreSQL or MS SQL Server instance that will host the archived database.
Archived database name
The name of the destination database. For MS SQL Server, if the database does not exist, it is created automatically when the Archive & Cleanup operation first runs. For PostgreSQL, the database must exist beforehand.
User and Password
Credentials of a user with permissions on the PostgreSQL Server or MS SQL Server instance sufficient to create tables, insert data, and (for MS SQL Server) create the archived database.
Binary data location
The path to the location where binary session data (screen captures) will be archived. Only shown when binary storage is used. When using Amazon S3-like storage, this field is replaced by Bucket name, Access key ID, and Secret access key.
Use separate credentials to access binary storage
Select this checkbox and provide a User and Password when the binary storage location requires separate credentials, for example a Network-Attached Storage location. Not available with Amazon S3-like storage, which uses its own key/secret.
Parameters applied only to Archive & Cleanup on MS SQL Server
Parameter
Purpose
Shrink database transaction log after cleanup
Runs a transaction log shrink at the end of each Archive & Cleanup operation. Recommended for MS SQL Server deployments where the transaction log grows aggressively during the operation itself.
Parameters applied to both Cleanup and Archive & Cleanup
Parameter
Purpose
Archive and clean up the database without archiving and deleting the binary data
When selected and a binary storage location is configured, screen captures are kept in binary storage even after the database side of the session is cleaned up or archived. Useful when binary storage retention policies differ from database retention policies.
Delete offline Clients without sessions
Offline Clients that have no recorded sessions are removed from the database during the cleanup process. Prevents orphaned Client records from accumulating when Clients are decommissioned before ever recording a session.
When a Client is deleted from the Management Tool, most of its data leaves with it. In certain edge cases the Client’s sessions can remain in the database as orphaned records. Use the Server Tray application on the Application Server computer to clean up these leftovers.
1
Open Database Parameters from the Server Tray
On the Application Server computer, right-click the Syteca Server tray icon in the Notification area and select Database Parameters.The Database Parameters application (DbSetupToolUI) opens.
2
Open the Advanced tab
In the Database Parameters application, select the Advanced tab.
3
Start the cleanup
Click Clean up lost sessions. The cleanup runs against the Syteca database and removes orphaned session records from deleted Clients.
The cleanup can take a long time for large databases. Progress is visible in the Management Tool, on the Tasks List tab of the System Health page. Verify completion there before assuming the operation is done.
PostgreSQL requires periodic maintenance called vacuuming. Vacuuming reclaims storage used by rows that are no longer visible to any transaction, and updates statistics the query planner relies on. Without vacuuming, PostgreSQL databases slowly bloat and query performance degrades.The Autovacuum Daemon is a set of PostgreSQL processes that vacuum the database automatically based on activity thresholds. It is enabled in the default PostgreSQL configuration and, in most Syteca deployments, requires no intervention.
Adjust autovacuum settings when the Application Server writes are heavy and default autovacuum tuning is not keeping up with the churn. Symptoms include:
Growing database size that outpaces retention-based expectations.
Slowing query performance as tables accumulate dead rows.
Autovacuum log entries indicating the daemon is running frequently and taking a long time to complete.
Autovacuum settings live in the PostgreSQL configuration file postgresql.conf. The location of postgresql.conf varies by operating system and PostgreSQL install method. Common locations:
Find the postgresql.conf file on the database server. Use the platform-specific paths above as a starting point.
2
Edit the autovacuum settings
Open postgresql.conf in a text editor with administrator or root permissions. Search for the settings beginning with autovacuum_ and adjust them according to the PostgreSQL documentation on the autovacuum daemon.
3
Restart the PostgreSQL database
Restart the PostgreSQL database service for the changes to take effect. Configuration changes to postgresql.conf are read at PostgreSQL start.
Restarting the PostgreSQL database disconnects the Syteca Application Server briefly. Plan the restart during a maintenance window when active Client recording can be paused, or accept a brief interruption to Session data ingest while the database service restarts.
Recreate the ActivityDB database and attach it as an archived database
NOT AVAILABLE IN SAAS.
1
Log in to the Application Server computer
Log in to the machine where Syteca Application Server is installed.
2
Stop the Application Server
Stop the EkranServer service.
3
Restart the database service
Restart your database service to close all existing connections to it.
4
Rename the existing ActivityDB database
MS SQL Server
PostgreSQL
In SQL Server Management Studio, expand Databases, right-click EkranActivityDB, select Rename, and enter a new name.
In pgAdmin4, check for existing connections to EkranActivityDB:
SELECT * FROM pg_stat_activity;
Close any existing connections:
SELECT pg_terminate_backend(<pid>);
Replace <pid> with the value shown for EkranActivityDB. Then rename the database:
ALTER DATABASE "EkranActivityDB" RENAME TO "newDBname";
5
Restart the database service again
Restart the database service now that the rename is complete.
6
Start the Application Server
Start the EkranServer service. Since the original EkranActivityDB was renamed, Syteca creates a new, empty EkranActivityDB under the original name.
7
Connect the renamed database as an archived database
Log in to the Management Tool, open Configuration > Database Management, and connect the renamed database as an archived investigated database. See Archived Sessions for how archived databases are viewed afterward.
Cleanup and Archive & Cleanup duration depends on how many sessions are in the database, their size, and where the archive instance is located.As a rough estimate: archiving a session whose screen captures are stored in the database takes 3 to 6 minutes; a session whose screen captures are stored in a shared folder takes under a minute.
IN SAAS ONLY: only the Cleanup operation is available — Archive & Cleanup isn’t offered in SaaS.
To move a Syteca database from an older MS SQL Server version (for example 2008 R2) to a newer one, back it up on the old server and restore it on the new one using SQL Server Management Studio (SSMS). This procedure applies to any older-to-newer MS SQL Server version transfer.
1
Connect to the source server
In SSMS, click Connect > Database Engine, and enter the credentials for the source MS SQL Server.
2
Back up the database
In Object Explorer, right-click the required database (for example SERVER.EkranManagementDatabase), select Tasks > Back Up.
3
Set the backup location
Click Add, then the … button, choose a location and file name, and click OK.
Note the backup location — you’ll need it in a later step.
4
Connect to the destination server
Connect to the destination MS SQL Server the same way as in step 1.
5
Create a new database with the same name
Right-click Databases, select New Database, and enter the exact same database name as the one backed up.
6
Restore from the backup
Right-click the new database, select Tasks > Restore > Database. Under Source, select Device, click the … button, Add, and select the backup file.
7
Relocate the database files
On the Files page of the restore dialog, select Relocate all files to folder.
8
Allow overwriting
On the Options page, select Overwrite the existing database (WITH REPLACE).
9
Complete the restore
Click OK. A confirmation message appears once the restore succeeds.
Relocating database files during restore in SQL Server Management Studio.
Click Shrink Transaction Log at the bottom of the page.
No progress indicator is shown, and there’s no notification when shrinking completes.
Not supported if the MS SQL database is part of an SQL availability group — the System Health page explains why in that case. Shrinking also can’t run while a database cleanup is already in progress.
Set up hash-code calculation for monitoring data validation
NOT AVAILABLE IN SAAS. Contact your Syteca vendor or the Syteca Support team to enable this in a SaaS environment.
This enables the hash-code option described in Validate monitoring data integrity above — a lighter-weight alternative to certificate signing.
Version 6.53.1 and later
Versions before 6.53.1
1
Stop the Application Server
Right-click the Syteca Server tray icon and select Stop, or stop the EkranServer service via Task Manager.
2
Add the key to the config file
Open EkranServer.Settings.config (by default in C:\Program Files\Ekran System\Ekran System\Server) and add:
<add key="SignMonitoredData" value="1" />
3
Start the Application Server
Start the EkranServer service again.
1
Stop the Application Server
Right-click the Syteca Server tray icon and select Stop, or stop the EkranServer service via Task Manager.
2
Set the registry value
Open Windows Registry Editor, select HKEY_LOCAL_MACHINE\SOFTWARE\EkranSystem, and add a new DWORD (32-bit) value named SignMonitoredData with data 1.
3
Start the Application Server
Start the EkranServer service again.
After updating to version 6.53.1 or later, this setting moves from the registry to EkranServer.Settings.config automatically, and further changes must be made in that file.
Set up certificate signing for monitoring data validation
NOT AVAILABLE IN SAAS. Contact your Syteca vendor or the Syteca Support team to enable this in a SaaS environment.
This completes the certificate-signing option described in Validate monitoring data integrity above. Do the following on the Application Server computer.
Press Windows+R, enter mmc, press Enter, and click Yes on the User Account Control prompt. Select File > Add/Remove Snap-in, choose Certificates, and click Add.
2
Target the local computer account
Select Computer account, click Next, select Local computer: (the computer this console is running on), and click Finish, then OK.
3
Import the certificate
Under Certificates (Local Computer), right-click Personal, select All Tasks > Import, and step through the Certificate Import Wizard: browse to the certificate file, enter its private key password if prompted, and finish the wizard.
4
Copy the certificate's thumbprint
Under Certificates (Local Computer) > Personal > Certificates, double-click the imported certificate, select Details > Thumbprint, and copy the value shown.
Right-click the Syteca Server tray icon and select Stop, or stop the EkranServer service via Task Manager.
2
Add the key to the config file
Open EkranServer.Settings.config (by default in C:\Program Files\Ekran System\Ekran System\Server) and add:
<add key="SignMonitoredDataCert" value="<copied Thumbprint value, no spaces>" />
3
Start the Application Server
Start the EkranServer service again.
1
Stop the Application Server
Right-click the Syteca Server tray icon and select Stop, or stop the EkranServer service via Task Manager.
2
Set the registry value
Open Windows Registry Editor, select HKEY_LOCAL_MACHINE\SOFTWARE\EkranSystem, and add a new String Value named SignMonitoredDataCert with the copied Thumbprint value (no spaces) as its data.
3
Start the Application Server
Start the EkranServer service again.
After updating to version 6.53.1 or later, this setting moves from the registry to EkranServer.Settings.config automatically, and further changes must be made in that file.
If the PostgreSQL database wasn’t removed automatically when the Application Server was uninstalled, delete it manually. Only the database owner or a superuser can do this.
Deleting a database can’t be undone.
1
Restart the PostgreSQL server
Restart the PostgreSQL server before deleting the database.
2
Open pgAdmin
Start pgAdmin and connect to the server.
3
Select the databases to delete
In the Browser pane, select the database to delete. By default, Syteca uses two databases:
ekranactivitydb
ekranmanagementdatabase
4
Delete each database
Right-click each database and select Delete/Drop, then click OK to confirm.
NOT AVAILABLE IN SAAS. Contact your Syteca vendor or the Syteca Support team to enable this in a SaaS environment.
Monitoring data validation confirms that screen captures and metadata received from Windows Clients haven’t been altered in the database. It’s available for both PostgreSQL and MS SQL Server.Two validation types are available:
Calculate hash codes — a hash is calculated for each screen capture and metadata record received.
Sign with a certificate — each screen capture and metadata record is signed with a trusted certificate.
If both are enabled, only certificate signing is actually used.
Enabling validation, or changing the validation type, invalidates every previously recorded Windows Client session.
Once enabled, opening a Windows Client session in the Session Player checks the integrity of its data. If any screen captures or metadata records were deleted or modified, the Session Player displays “Session data is not valid!”
Enabling validation increases CPU usage while viewing sessions in the Session Player. Screen captures won’t display for existing sessions that hadn’t been viewed before validation was enabled.
Isolation mode temporarily disconnects every Client from the database, useful when fixing database issues, running cleanup, or performing maintenance. While isolated, Clients keep monitoring and write data to their local cache until reconnected.
Click System Health, then the drop-down next to the System State tab.
2
Enable isolation
Select Isolate Database from Clients.
While enabled, every Client operates offline and writes to its local cache. Data flows to the Application Server automatically as soon as isolation is disabled.
1
Open System Health
Click System Health, then the drop-down next to the System State tab.
2
Disable isolation
Select Stop Isolating Database from Clients (or click the here link in the notification banner shown at the top of every page while isolation is active).
After a long isolation period, disabling it causes a network load spike as every Client sends its accumulated offline data at once.