Manage the Syteca database over its lifetime. Configure Archive and Cleanup operations, clean up sessions left behind by deleted Endpoints, and tune PostgreSQL autovacuuming to keep the database healthy under sustained write load.
Ongoing Syteca database management covers three operational concerns. Reclaiming space through Archive and Cleanup operations. Tidying the database when Endpoints are removed and their sessions remain behind. Keeping PostgreSQL databases performing well through automatic vacuuming. This page documents the parameters and procedures for each.
NOT AVAILABLE IN SAAS. Database management is on the on-premises Syteca database. In SaaS deployments, the Syteca vendor manages the database including all Archive and Cleanup operations, deleted-Endpoint tidying, and PostgreSQL maintenance.
Archive and Cleanup operations move older session data out of the primary Syteca database. The Cleanup operation removes it entirely; the Archive and Cleanup operation moves it to a separate archived database first, then removes it from the primary database. Both operations share a set of parameters configured on the Configuration page.
Parameters applied to Archive & Cleanup for both PostgreSQL and MS SQL Server
These parameters are needed when the Archive & Cleanup operation is used. They point Syteca at the archive destination.
Parameter
Purpose
Instance
The path to the PostgreSQL or MS SQL Server instance that will host the archived database.
Archived database name
The name of the destination database. For MS SQL Server, if the database does not exist, it is created automatically when the Archive & Cleanup operation first runs. For PostgreSQL, the database must exist beforehand.
User and Password
Credentials of a user with permissions on the PostgreSQL Server or MS SQL Server instance sufficient to create tables, insert data, and (for MS SQL Server) create the archived database.
Binary data location
The path to the location where binary session data (screen captures) will be archived. Only shown when binary storage is used. When using Amazon S3-like storage, this field is replaced by Bucket name, Access key ID, and Secret access key.
Use separate credentials to access binary storage
Select this checkbox and provide a User and Password when the binary storage location requires separate credentials, for example a Network-Attached Storage location. Not available with Amazon S3-like storage, which uses its own key/secret.
Parameters applied only to Archive & Cleanup on MS SQL Server
Parameter
Purpose
Shrink database transaction log after cleanup
Runs a transaction log shrink at the end of each Archive & Cleanup operation. Recommended for MS SQL Server deployments where the transaction log grows aggressively during the operation itself.
Parameters applied to both Cleanup and Archive & Cleanup
Parameter
Purpose
Archive and clean up the database without archiving and deleting the binary data
When selected and a binary storage location is configured, screen captures are kept in binary storage even after the database side of the session is cleaned up or archived. Useful when binary storage retention policies differ from database retention policies.
Delete offline Endpoints without sessions
Offline Endpoints that have no recorded sessions are removed from the database during the cleanup process. Prevents orphaned Endpoint records from accumulating when Endpoints are decommissioned before ever recording a session.
When a Endpoint is deleted from the Management Tool, most of its data leaves with it. In certain edge cases the Endpoint’s sessions can remain in the database as orphaned records. Use the Server Tray application on the Application Server computer to clean up these leftovers.
1
Open Database Parameters from the Server Tray
On the Application Server computer, right-click the Syteca Server tray icon in the Notification area and select Database Parameters.The Database Parameters application (DbSetupToolUI) opens.
2
Open the Advanced tab
In the Database Parameters application, select the Advanced tab.
3
Start the cleanup
Click Clean up lost sessions. The cleanup runs against the Syteca database and removes orphaned session records from deleted Endpoints.
The cleanup can take a long time for large databases. Progress is visible in the Management Tool, on the Tasks List tab of the System Health page. Verify completion there before assuming the operation is done.
PostgreSQL requires periodic maintenance called vacuuming. Vacuuming reclaims storage used by rows that are no longer visible to any transaction, and updates statistics the query planner relies on. Without vacuuming, PostgreSQL databases slowly bloat and query performance degrades.The Autovacuum Daemon is a set of PostgreSQL processes that vacuum the database automatically based on activity thresholds. It is enabled in the default PostgreSQL configuration and, in most Syteca deployments, requires no intervention.
Adjust autovacuum settings when the Application Server writes are heavy and default autovacuum tuning is not keeping up with the churn. Symptoms include:
Growing database size that outpaces retention-based expectations.
Slowing query performance as tables accumulate dead rows.
Autovacuum log entries indicating the daemon is running frequently and taking a long time to complete.
Autovacuum settings live in the PostgreSQL configuration file postgresql.conf. The location of postgresql.conf varies by operating system and PostgreSQL install method. Common locations:
Find the postgresql.conf file on the database server. Use the platform-specific paths above as a starting point.
2
Edit the autovacuum settings
Open postgresql.conf in a text editor with administrator or root permissions. Search for the settings beginning with autovacuum_ and adjust them according to the PostgreSQL documentation on the autovacuum daemon.
3
Restart the PostgreSQL database
Restart the PostgreSQL database service for the changes to take effect. Configuration changes to postgresql.conf are read at PostgreSQL start.
Restarting the PostgreSQL database disconnects the Syteca Application Server briefly. Plan the restart during a maintenance window when active Endpoint recording can be paused, or accept a brief interruption to Session data ingest while the database service restarts.
Recreate the ActivityDB database and attach it as an archived database
NOT AVAILABLE IN SAAS.
1
Log in to the Application Server computer
Log in to the machine where Syteca Application Server is installed.
2
Stop the Application Server
Stop the EkranServer service.
3
Restart the database service
Restart your database service to close all existing connections to it.
4
Rename the existing ActivityDB database
MS SQL Server
PostgreSQL
In SQL Server Management Studio, expand Databases, right-click EkranActivityDB, select Rename, and enter a new name.
In pgAdmin4, check for existing connections to EkranActivityDB:
SELECT * FROM pg_stat_activity;
Close any existing connections:
SELECT pg_terminate_backend(<pid>);
Replace <pid> with the value shown for EkranActivityDB. Then rename the database:
ALTER DATABASE "EkranActivityDB" RENAME TO "newDBname";
5
Restart the database service again
Restart the database service now that the rename is complete.
6
Start the Application Server
Start the EkranServer service. Since the original EkranActivityDB was renamed, Syteca creates a new, empty EkranActivityDB under the original name.
7
Connect the renamed database as an archived database
Log in to the Management Tool, open Configuration > Database Management, and connect the renamed database as an archived investigated database. See Archived Sessions for how archived databases are viewed afterward.
Cleanup and Archive & Cleanup duration depends on how many sessions are in the database, their size, and where the archive instance is located.As a rough estimate: archiving a session whose screen captures are stored in the database takes 3 to 6 minutes; a session whose screen captures are stored in a shared folder takes under a minute.
IN SAAS ONLY: only the Cleanup operation is available — Archive & Cleanup isn’t offered in SaaS.
To move a Syteca database from an older MS SQL Server version (for example 2008 R2) to a newer one, back it up on the old server and restore it on the new one using SQL Server Management Studio (SSMS). This procedure applies to any older-to-newer MS SQL Server version transfer.
1
Connect to the source server
In SSMS, click Connect > Database Engine, and enter the credentials for the source MS SQL Server.
2
Back up the database
In Object Explorer, right-click the required database (for example SERVER.EkranManagementDatabase), select Tasks > Back Up.
3
Set the backup location
Click Add, then the … button, choose a location and file name, and click OK.
Note the backup location — you’ll need it in a later step.
4
Connect to the destination server
Connect to the destination MS SQL Server the same way as in step 1.
5
Create a new database with the same name
Right-click Databases, select New Database, and enter the exact same database name as the one backed up.
6
Restore from the backup
Right-click the new database, select Tasks > Restore > Database. Under Source, select Device, click the … button, Add, and select the backup file.
7
Relocate the database files
On the Files page of the restore dialog, select Relocate all files to folder.
8
Allow overwriting
On the Options page, select Overwrite the existing database (WITH REPLACE).
9
Complete the restore
Click OK. A confirmation message appears once the restore succeeds.
Relocating database files during restore in SQL Server Management Studio.
Click Shrink Transaction Log at the bottom of the page.
No progress indicator is shown, and there’s no notification when shrinking completes.
Not supported if the MS SQL database is part of an SQL availability group — the System Health page explains why in that case. Shrinking also can’t run while a database cleanup is already in progress.
Set up hash-code calculation for monitoring data validation
NOT AVAILABLE IN SAAS. Contact your Syteca vendor or the Syteca Support team to enable this in a SaaS environment.
This enables the hash-code option described in Validate monitoring data integrity above — a lighter-weight alternative to certificate signing.
Version 6.53.1 and later
Versions before 6.53.1
1
Stop the Application Server
Right-click the Syteca Server tray icon and select Stop, or stop the EkranServer service via Task Manager.
2
Add the key to the config file
Open EkranServer.Settings.config (by default in C:\Program Files\Ekran System\Ekran System\Server) and add:
<add key="SignMonitoredData" value="1" />
3
Start the Application Server
Start the EkranServer service again.
1
Stop the Application Server
Right-click the Syteca Server tray icon and select Stop, or stop the EkranServer service via Task Manager.
2
Set the registry value
Open Windows Registry Editor, select HKEY_LOCAL_MACHINE\SOFTWARE\EkranSystem, and add a new DWORD (32-bit) value named SignMonitoredData with data 1.
3
Start the Application Server
Start the EkranServer service again.
After updating to version 6.53.1 or later, this setting moves from the registry to EkranServer.Settings.config automatically, and further changes must be made in that file.
Set up certificate signing for monitoring data validation
NOT AVAILABLE IN SAAS. Contact your Syteca vendor or the Syteca Support team to enable this in a SaaS environment.
This completes the certificate-signing option described in Validate monitoring data integrity above. Do the following on the Application Server computer.
Press Windows+R, enter mmc, press Enter, and click Yes on the User Account Control prompt. Select File > Add/Remove Snap-in, choose Certificates, and click Add.
2
Target the local computer account
Select Computer account, click Next, select Local computer: (the computer this console is running on), and click Finish, then OK.
3
Import the certificate
Under Certificates (Local Computer), right-click Personal, select All Tasks > Import, and step through the Certificate Import Wizard: browse to the certificate file, enter its private key password if prompted, and finish the wizard.
4
Copy the certificate's thumbprint
Under Certificates (Local Computer) > Personal > Certificates, double-click the imported certificate, select Details > Thumbprint, and copy the value shown.
Right-click the Syteca Server tray icon and select Stop, or stop the EkranServer service via Task Manager.
2
Add the key to the config file
Open EkranServer.Settings.config (by default in C:\Program Files\Ekran System\Ekran System\Server) and add:
<add key="SignMonitoredDataCert" value="<copied Thumbprint value, no spaces>" />
3
Start the Application Server
Start the EkranServer service again.
1
Stop the Application Server
Right-click the Syteca Server tray icon and select Stop, or stop the EkranServer service via Task Manager.
2
Set the registry value
Open Windows Registry Editor, select HKEY_LOCAL_MACHINE\SOFTWARE\EkranSystem, and add a new String Value named SignMonitoredDataCert with the copied Thumbprint value (no spaces) as its data.
3
Start the Application Server
Start the EkranServer service again.
After updating to version 6.53.1 or later, this setting moves from the registry to EkranServer.Settings.config automatically, and further changes must be made in that file.
If the PostgreSQL database wasn’t removed automatically when the Application Server was uninstalled, delete it manually. Only the database owner or a superuser can do this.
Deleting a database can’t be undone.
1
Restart the PostgreSQL server
Restart the PostgreSQL server before deleting the database.
2
Open pgAdmin
Start pgAdmin and connect to the server.
3
Select the databases to delete
In the Browser pane, select the database to delete. By default, Syteca uses two databases:
ekranactivitydb
ekranmanagementdatabase
4
Delete each database
Right-click each database and select Delete/Drop, then click OK to confirm.
NOT AVAILABLE IN SAAS. Contact your Syteca vendor or the Syteca Support team to enable this in a SaaS environment.
Monitoring data validation confirms that screen captures and metadata received from Windows Endpoint haven’t been altered in the database. It’s available for both PostgreSQL and MS SQL Server.Two validation types are available:
Calculate hash codes — a hash is calculated for each screen capture and metadata record received.
Sign with a certificate — each screen capture and metadata record is signed with a trusted certificate.
If both are enabled, only certificate signing is actually used.
Enabling validation, or changing the validation type, invalidates every previously recorded Windows Endpoint session.
Once enabled, opening a Windows Endpoint session in the Session Player checks the integrity of its data. If any screen captures or metadata records were deleted or modified, the Session Player displays “Session data is not valid!”
Enabling validation increases CPU usage while viewing sessions in the Session Player. Screen captures won’t display for existing sessions that hadn’t been viewed before validation was enabled.
Isolation mode temporarily disconnects every Endpoints from the database, useful when fixing database issues, running cleanup, or performing maintenance. While isolated, Endpoints keep monitoring and write data to their local cache until reconnected.
Click System Health, then the drop-down next to the System State tab.
2
Enable isolation
Select Isolate Database from Endpoints.
While enabled, every Endpoint operates offline and writes to its local cache. Data flows to the Application Server automatically as soon as isolation is disabled.
1
Open System Health
Click System Health, then the drop-down next to the System State tab.
2
Disable isolation
Select Stop Isolating Database from Endpoints (or click the here link in the notification banner shown at the top of every page while isolation is active).
After a long isolation period, disabling it causes a network load spike as every Endpoint sends its accumulated offline data at once.
Diagnose Application Server issues, including database connection loss and Management Tool availability errors.
Application Server resource monitoring
Watch the database write queue and storage usage in real time from the System State page.
System requirements
Database sizing, supported PostgreSQL and MS SQL versions, and network port requirements.
Shared storage HA
Move screen captures out of the database to shared storage, reducing database growth substantially.
{"docsConfig":{"theme":"mint","$schema":"https://mintlify.com/docs.json","name":"Syteca","description":"Syteca documentation - User Activity Monitoring and Privileged Access Management in a single platform.","colors":{"primary":"#2563EB","light":"#5B8DEF","dark":"#1D4ED8"},"logo":{"light":"https://mintcdn.com/syteca/ZVta4JfIcSnC47NX/logo/syteca-light.svg?fit=max\u0026auto=format\u0026n=ZVta4JfIcSnC47NX\u0026q=85\u0026s=154a18f69aa4aefa55de0de7669934c7","dark":"https://mintcdn.com/syteca/ZVta4JfIcSnC47NX/logo/syteca-dark.svg?fit=max\u0026auto=format\u0026n=ZVta4JfIcSnC47NX\u0026q=85\u0026s=07170d0c543f4264cca523f1b74b912e","href":"https://www.syteca.com/docs"},"favicon":"https://mintcdn.com/syteca/0FlD-vkHsBA1azVX/favicon.ico?fit=max\u0026auto=format\u0026n=0FlD-vkHsBA1azVX\u0026q=85\u0026s=6c6a5b9e7da5f386c9d031d55704987a","appearance":{"default":"system","strict":false},"background":{"decoration":"grid","color":{"light":"#FFFFFF","dark":"#0B0D12"}},"navbar":{"links":[{"href":"https://www.syteca.com/docs/release-notes/overview","label":"Changelog"},{"href":"https://www.syteca.com/docs/api/acb/api-reference","label":"API Reference"},{"href":"https://www.syteca.com/en/support/contact-support","label":"Support"}],"primary":{"type":"button","label":"Book a Demo","href":"https://www.syteca.com/en/book-a-demo"}},"footer":{"socials":{"youtube":"https://www.youtube.com/@syteca","linkedin":"https://www.linkedin.com/company/syteca.com"},"links":[{"header":"Product","items":[{"label":"Overview","href":"https://www.syteca.com/docs"},{"label":"Releases","href":"https://www.syteca.com/docs/release-notes/overview"},{"label":"Pricing","href":"https://syteca.com/pricing"}]},{"header":"Company","items":[{"label":"About","href":"https://www.syteca.com/en/company/about-us"}]},{"header":"Legal","items":[{"label":"Privacy","href":"https://syteca.com/privacy"},{"label":"Terms","href":"https://www.syteca.com/en/terms-of-use"}]}]},"search":{"prompt":"Syteca Documentation"},"seo":{"metatags":{"og:image":"https://www.syteca.com/og-default.png","og:site_name":"Syteca Docs","canonical":"https://www.syteca.com/docs"}},"fonts":{"heading":{"family":"Inter","weight":700},"body":{"family":"Inter","weight":400}},"icons":{"library":"lucide"},"styling":{"eyebrows":"section","codeblocks":"system","latex":false},"integrations":{"ga4":{"measurementId":"G-3SYH6XSJXQ"}},"errors":{"404":{"redirect":false}},"navigation":{"pages":[]}},"deployment":{"deploymentMetadataValue":{"subdomain":"syteca","hasAudioNarration":false,"actualSubdomain":"syteca","customDomains":["syteca.com"],"gitSource":{"type":"github","owner":"syteca","repo":"syteca-docs-poc","deployBranch":"main","contentDirectory":"","isPrivate":true,"mountPath":"","label":""},"chroma":{"liveDeploymentHistoryId":"6ad1514242be2c5dff43c208","collectionId":"e06ba704-cd46-4c1a-bce9-943887181a47","schemaVersion":"v3","latestBuiltDeploymentHistoryId":"6ad1514242be2c5dff43c208"},"feedback":{"thumbs":false},"entitlements":{"AI_CHAT":{"status":"DISABLED"}},"buildId":"6ad1514242be2c5dff43c208","clientVersion":"0.0.3869","searchFilterCounts":[{"language":"default","tag":"Administration","count":95},{"language":"default","tag":"API \u0026 Integrations","count":80},{"language":"default","tag":"Application Credentials Broker","count":50},{"language":"default","tag":"Session Monitoring","count":42},{"language":"default","tag":"Endpoint Risk Control","count":31},{"language":"default","tag":"Endpoints","count":28},{"language":"default","tag":"Privileged Access Management","count":26},{"language":"default","tag":"Release Notes","count":24},{"language":"default","tag":"Get Started","count":18},{"language":"default","tag":"Syteca changelog","count":18}]},"assistantConfig":{"enableAskAiButton":false,"enableStarterQuestions":false,"enableContextualStarterQuestions":false,"enableAskAiSearchBar":true},"hasChatPermissions":false,"hasWebMcpPermissions":false,"toggles":[{"name":"kill-isr","enabled":true,"variant":{"name":"disabled","enabled":false,"feature_enabled":true},"impressionData":false},{"name":"agent-mintlify-slack","enabled":true,"variant":{"name":"disabled","enabled":false,"feature_enabled":true},"impressionData":false},{"name":"editor-v7-file-tree","enabled":true,"variant":{"name":"disabled","enabled":false,"feature_enabled":true},"impressionData":false},{"name":"agent-integrations-settings","enabled":true,"variant":{"name":"disabled","enabled":false,"feature_enabled":true},"impressionData":false},{"name":"automations-pr-grouping","enabled":true,"variant":{"name":"disabled","enabled":false,"feature_enabled":true},"impressionData":false},{"name":"custom-prefix","enabled":true,"variant":{"name":"disabled","enabled":false,"feature_enabled":true},"impressionData":false},{"name":"analytics-v7","enabled":true,"variant":{"name":"disabled","enabled":false,"feature_enabled":true},"impressionData":false},{"name":"user-flows-analytics","enabled":true,"variant":{"name":"disabled","enabled":false,"feature_enabled":true},"impressionData":false},{"name":"no-publish-flow","enabled":true,"variant":{"name":"disabled","enabled":false,"feature_enabled":true},"impressionData":false},{"name":"llms-txt-v2","enabled":true,"variant":{"name":"disabled","enabled":false,"feature_enabled":true},"impressionData":false},{"name":"pause-universal-search-reconcile","enabled":true,"variant":{"name":"disabled","enabled":false,"feature_enabled":true},"impressionData":false},{"name":"snapshot-serving-live","enabled":true,"variant":{"name":"disabled","enabled":false,"feature_enabled":true},"impressionData":false},{"name":"stripTemperatureMiddleware","enabled":true,"variant":{"name":"disabled","enabled":false,"feature_enabled":true},"impressionData":false},{"name":"per-site-search-delta","enabled":true,"variant":{"name":"disabled","enabled":false,"feature_enabled":true},"impressionData":false},{"name":"support-platform-pylon-zendesk","enabled":true,"variant":{"name":"disabled","enabled":false,"feature_enabled":true},"impressionData":false},{"name":"editor-branches-v2-autocommit","enabled":true,"variant":{"name":"disabled","enabled":false,"feature_enabled":true},"impressionData":false},{"name":"editor-branches-v2","enabled":true,"variant":{"name":"disabled","enabled":false,"feature_enabled":true},"impressionData":false},{"name":"snapshot-serving","enabled":true,"variant":{"name":"disabled","enabled":false,"feature_enabled":true},"impressionData":false},{"name":"instant-rollback","enabled":true,"variant":{"name":"disabled","enabled":false,"feature_enabled":true},"impressionData":false},{"name":"granular-notifications-server","enabled":true,"variant":{"name":"disabled","enabled":false,"feature_enabled":true},"impressionData":false},{"name":"granular-notifications","enabled":true,"variant":{"name":"disabled","enabled":false,"feature_enabled":true},"impressionData":false},{"name":"editor-private-page-search","enabled":true,"variant":{"name":"disabled","enabled":false,"feature_enabled":true},"impressionData":false},{"name":"automations-fable","enabled":true,"variant":{"name":"disabled","enabled":false,"feature_enabled":true},"impressionData":false},{"name":"fixed-ai-action-pricing","enabled":true,"variant":{"name":"disabled","enabled":false,"feature_enabled":true},"impressionData":false},{"name":"automation-resolve-merge-conflict","enabled":true,"variant":{"name":"disabled","enabled":false,"feature_enabled":true},"impressionData":false},{"name":"scoped-publishing","enabled":true,"variant":{"name":"disabled","enabled":false,"feature_enabled":true},"impressionData":false},{"name":"mintql","enabled":true,"variant":{"name":"disabled","enabled":false,"feature_enabled":true},"impressionData":false},{"name":"page-level-analytics","enabled":true,"variant":{"name":"disabled","enabled":false,"feature_enabled":true},"impressionData":false},{"name":"teamspace","enabled":true,"variant":{"name":"disabled","enabled":false,"feature_enabled":true},"impressionData":false},{"name":"editor-version-history-v2","enabled":true,"variant":{"name":"disabled","enabled":false,"feature_enabled":true},"impressionData":false},{"name":"vite-origin","enabled":true,"variant":{"name":"disabled","enabled":false,"feature_enabled":true},"impressionData":false},{"name":"editor-nav-generations","enabled":true,"variant":{"name":"disabled","enabled":false,"feature_enabled":true},"impressionData":false},{"name":"workspace-projects","enabled":true,"variant":{"name":"disabled","enabled":false,"feature_enabled":true},"impressionData":false},{"name":"assistant-v5","enabled":true,"variant":{"name":"disabled","enabled":false,"feature_enabled":true},"impressionData":false},{"name":"byok-sep-25","enabled":true,"variant":{"name":"disabled","enabled":false,"feature_enabled":true},"impressionData":false},{"name":"revalidation-jwt","enabled":true,"variant":{"name":"disabled","enabled":false,"feature_enabled":true},"impressionData":false},{"name":"editor-agent-model-picker","enabled":true,"variant":{"name":"disabled","enabled":false,"feature_enabled":true},"impressionData":false},{"name":"client-snapshot-docs-config","enabled":true,"variant":{"name":"disabled","enabled":false,"feature_enabled":true},"impressionData":false}],"isAtlas":false,"googleFontsInlined":false},"customCss":[{"filePath":"style.css","content":":root{--syteca-brand:#2563EB;--syteca-brand-strong:#1D4ED8;--syteca-brand-soft:#EFF6FF;--syteca-accent-green:#16A34A;--syteca-accent-amber:#D97706;--syteca-accent-violet:#7C3AED;--syteca-accent-rose:#DB2777;--syteca-accent-cyan:#0891B2;--syteca-accent-teal:#0D9488}html.dark{--syteca-brand:#5B8DEF;--syteca-brand-strong:#7AA1F3;--syteca-brand-soft:#14213D}.prose h1{letter-spacing:-.025em}.prose h2{letter-spacing:-.015em}a[class*=rounded-][class*=border]:hover{transform:translateY(-1px);transition:transform 150ms ease,box-shadow 150ms ease,border-color 150ms ease}.prose code,.prose pre{font-family:\"JetBrains Mono\",\"SF Mono\",\"Menlo\",\"Consolas\",monospace}.prose table thead th{border-bottom:2px solid var(--syteca-brand);font-weight:600}.prose table tbody td{padding-top:.55rem;padding-bottom:.55rem}figure figcaption{font-size:13px;color:rgb(113 113 122/1);margin-top:.6rem}nav[aria-label=Sidebar] a{padding-top:.3rem;padding-bottom:.3rem;font-size:13.5px}.demo-bar{display:none}"}],"page":{"pagePath":"administration/deployment/database-management","slug":"/administration/deployment/database-management","pageMetadata":{"title":"Database Management","sidebarTitle":"Database management","description":"Manage the Syteca database over its lifetime. Configure Archive and Cleanup operations, clean up sessions left behind by deleted Endpoints, and tune PostgreSQL autovacuuming to keep the database healthy under sustained write load.","icon":"database","keywords":["syteca database management","archive cleanup parameters syteca","postgresql autovacuum syteca","clean up deleted endpoint sessions","server tray database parameters","syteca database maintenance"],"href":"/administration/deployment/database-management"},"description":{"compiledSource":"\"use strict\";\nconst {jsx: _jsx} = arguments[0];\nconst {useMDXComponents: _provideComponents} = arguments[0];\nfunction _createMdxContent(props) {\n const _components = {\n p: \"p\",\n ..._provideComponents(),\n ...props.components\n };\n return _jsx(_components.p, {\n children: \"Manage the Syteca database over its lifetime. Configure Archive and Cleanup operations, clean up sessions left behind by deleted Endpoints, and tune PostgreSQL autovacuuming to keep the database healthy under sustained write load.\"\n });\n}\nfunction MDXContent(props = {}) {\n const {wrapper: MDXLayout} = {\n ..._provideComponents(),\n ...props.components\n };\n return MDXLayout ? _jsx(MDXLayout, {\n ...props,\n children: _jsx(_createMdxContent, {\n ...props\n })\n }) : _createMdxContent(props);\n}\nreturn {\n default: MDXContent\n};\n","frontmatter":{},"scope":{}},"pageType":"default","mdx":{"mdxSource":{"compiledSource":"\"use strict\";const{Fragment:_Fragment,jsx:_jsx,jsxs:_jsxs}=arguments[0];const{useMDXComponents:_provideComponents}=arguments[0];function _createMdxContent(props){const _components={a:`a`,code:`code`,li:`li`,ol:`ol`,p:`p`,pre:`pre`,span:`span`,strong:`strong`,tbody:`tbody`,td:`td`,th:`th`,thead:`thead`,tr:`tr`,ul:`ul`,..._provideComponents(),...props.components},{Card,CardGroup,CodeBlock,Frame,Heading,Note,OptimizedImage,Step,Steps,Tab,Table,Tabs,Tip,Warning}=_components;if(!Card)_missingMdxReference(`Card`,true);if(!CardGroup)_missingMdxReference(`CardGroup`,true);if(!CodeBlock)_missingMdxReference(`CodeBlock`,true);if(!Frame)_missingMdxReference(`Frame`,true);if(!Heading)_missingMdxReference(`Heading`,true);if(!Note)_missingMdxReference(`Note`,true);if(!OptimizedImage)_missingMdxReference(`OptimizedImage`,true);if(!Step)_missingMdxReference(`Step`,true);if(!Steps)_missingMdxReference(`Steps`,true);if(!Tab)_missingMdxReference(`Tab`,true);if(!Table)_missingMdxReference(`Table`,true);if(!Tabs)_missingMdxReference(`Tabs`,true);if(!Tip)_missingMdxReference(`Tip`,true);if(!Warning)_missingMdxReference(`Warning`,true);return _jsxs(_Fragment,{children:[_jsx(_components.p,{children:`Ongoing Syteca database management covers three operational concerns. Reclaiming space through Archive and Cleanup operations. Tidying the database when Endpoints are removed and their sessions remain behind. Keeping PostgreSQL databases performing well through automatic vacuuming. This page documents the parameters and procedures for each.`}),`\n`,_jsx(Warning,{children:_jsxs(_components.p,{children:[_jsx(_components.strong,{children:`NOT AVAILABLE IN SAAS.`}),` Database management is on the on-premises Syteca database. In SaaS deployments, the Syteca vendor manages the database including all Archive and Cleanup operations, deleted-Endpoint tidying, and PostgreSQL maintenance.`]})}),`\n`,_jsx(Heading,{level:`2`,id:`archive-and-cleanup-parameters`,children:`Archive and Cleanup parameters`}),`\n`,_jsxs(_components.p,{children:[`Archive and Cleanup operations move older session data out of the primary Syteca database. The Cleanup operation removes it entirely; the Archive and Cleanup operation moves it to a separate archived database first, then removes it from the primary database. Both operations share a set of parameters configured on the `,_jsx(_components.strong,{children:`Configuration`}),` page.`]}),`\n`,_jsx(Heading,{level:`3`,id:`where-to-configure`,children:`Where to configure`}),`\n`,_jsxs(_components.ol,{children:[`\n`,_jsxs(_components.li,{children:[`Click the `,_jsx(_components.strong,{children:`Configuration`}),` button at the top of the Management Tool interface.`]}),`\n`,_jsxs(_components.li,{children:[`On the Configuration page, select the `,_jsx(_components.strong,{children:`Database Management`}),` tab.`]}),`\n`,_jsxs(_components.li,{children:[`Scroll to the `,_jsx(_components.strong,{children:`Archive Parameters`}),` section.`]}),`\n`]}),`\n`,_jsx(Frame,{caption:`Archive Parameters section. Configures both Cleanup and Archive \u0026 Cleanup operations from a single place.`,children:_jsx(OptimizedImage,{src:`https://mintcdn.com/syteca/0FlD-vkHsBA1azVX/images/administration/deployment/database-management-archive-parameters.png?fit=max\u0026auto=format\u0026n=0FlD-vkHsBA1azVX\u0026q=85\u0026s=1de690419633263a0e6db3ebebec904e`,alt:`Archive Parameters section of the Database Management tab`,\"data-og-width\":`1910`,width:`1910`,\"data-og-height\":`1029`,height:`1029`,\"data-path\":`images/administration/deployment/database-management-archive-parameters.png`,\"data-optimize\":`true`,\"data-opv\":`3`,srcset:`https://mintcdn.com/syteca/0FlD-vkHsBA1azVX/images/administration/deployment/database-management-archive-parameters.png?w=280\u0026fit=max\u0026auto=format\u0026n=0FlD-vkHsBA1azVX\u0026q=85\u0026s=a4e359507098bba330bacc537b45afd4 280w, https://mintcdn.com/syteca/0FlD-vkHsBA1azVX/images/administration/deployment/database-management-archive-parameters.png?w=560\u0026fit=max\u0026auto=format\u0026n=0FlD-vkHsBA1azVX\u0026q=85\u0026s=c0bda22b70887926937d4f9639598d15 560w, https://mintcdn.com/syteca/0FlD-vkHsBA1azVX/images/administration/deployment/database-management-archive-parameters.png?w=840\u0026fit=max\u0026auto=format\u0026n=0FlD-vkHsBA1azVX\u0026q=85\u0026s=ef3f1e46a3aa9282525999c376e6010b 840w, https://mintcdn.com/syteca/0FlD-vkHsBA1azVX/images/administration/deployment/database-management-archive-parameters.png?w=1100\u0026fit=max\u0026auto=format\u0026n=0FlD-vkHsBA1azVX\u0026q=85\u0026s=0e07ad35364100fff7a6e2147a9f89d5 1100w, https://mintcdn.com/syteca/0FlD-vkHsBA1azVX/images/administration/deployment/database-management-archive-parameters.png?w=1650\u0026fit=max\u0026auto=format\u0026n=0FlD-vkHsBA1azVX\u0026q=85\u0026s=0a2cb01f9b63aecca7dc3e396ee7e140 1650w, https://mintcdn.com/syteca/0FlD-vkHsBA1azVX/images/administration/deployment/database-management-archive-parameters.png?w=2500\u0026fit=max\u0026auto=format\u0026n=0FlD-vkHsBA1azVX\u0026q=85\u0026s=35d95b67ec126b9eb0779f439182b20d 2500w`})}),`\n`,_jsx(Heading,{level:`3`,id:`parameters-applied-to-archive-\u0026-cleanup-for-both-postgresql-and-ms-sql-server`,children:`Parameters applied to Archive \u0026 Cleanup for both PostgreSQL and MS SQL Server`}),`\n`,_jsx(_components.p,{children:`These parameters are needed when the Archive \u0026 Cleanup operation is used. They point Syteca at the archive destination.`}),`\n`,_jsxs(Table,{children:[_jsx(_components.thead,{children:_jsxs(_components.tr,{children:[_jsx(_components.th,{children:`Parameter`}),_jsx(_components.th,{children:`Purpose`})]})}),_jsxs(_components.tbody,{children:[_jsxs(_components.tr,{children:[_jsx(_components.td,{children:_jsx(_components.strong,{children:`Instance`})}),_jsx(_components.td,{children:`The path to the PostgreSQL or MS SQL Server instance that will host the archived database.`})]}),_jsxs(_components.tr,{children:[_jsx(_components.td,{children:_jsx(_components.strong,{children:`Archived database name`})}),_jsx(_components.td,{children:`The name of the destination database. For MS SQL Server, if the database does not exist, it is created automatically when the Archive \u0026 Cleanup operation first runs. For PostgreSQL, the database must exist beforehand.`})]}),_jsxs(_components.tr,{children:[_jsxs(_components.td,{children:[_jsx(_components.strong,{children:`User`}),` and `,_jsx(_components.strong,{children:`Password`})]}),_jsx(_components.td,{children:`Credentials of a user with permissions on the PostgreSQL Server or MS SQL Server instance sufficient to create tables, insert data, and (for MS SQL Server) create the archived database.`})]}),_jsxs(_components.tr,{children:[_jsx(_components.td,{children:_jsx(_components.strong,{children:`Binary data location`})}),_jsxs(_components.td,{children:[`The path to the location where binary session data (screen captures) will be archived. Only shown when binary storage is used. When using Amazon S3-like storage, this field is replaced by `,_jsx(_components.strong,{children:`Bucket name`}),`, `,_jsx(_components.strong,{children:`Access key ID`}),`, and `,_jsx(_components.strong,{children:`Secret access key`}),`.`]})]}),_jsxs(_components.tr,{children:[_jsx(_components.td,{children:_jsx(_components.strong,{children:`Use separate credentials to access binary storage`})}),_jsxs(_components.td,{children:[`Select this checkbox and provide a `,_jsx(_components.strong,{children:`User`}),` and `,_jsx(_components.strong,{children:`Password`}),` when the binary storage location requires separate credentials, for example a Network-Attached Storage location. Not available with Amazon S3-like storage, which uses its own key/secret.`]})]})]})]}),`\n`,_jsx(Heading,{level:`3`,id:`parameters-applied-only-to-archive-\u0026-cleanup-on-ms-sql-server`,children:`Parameters applied only to Archive \u0026 Cleanup on MS SQL Server`}),`\n`,_jsxs(Table,{children:[_jsx(_components.thead,{children:_jsxs(_components.tr,{children:[_jsx(_components.th,{children:`Parameter`}),_jsx(_components.th,{children:`Purpose`})]})}),_jsx(_components.tbody,{children:_jsxs(_components.tr,{children:[_jsx(_components.td,{children:_jsx(_components.strong,{children:`Shrink database transaction log after cleanup`})}),_jsx(_components.td,{children:`Runs a transaction log shrink at the end of each Archive \u0026 Cleanup operation. Recommended for MS SQL Server deployments where the transaction log grows aggressively during the operation itself.`})]})})]}),`\n`,_jsx(Heading,{level:`3`,id:`parameters-applied-to-both-cleanup-and-archive-\u0026-cleanup`,children:`Parameters applied to both Cleanup and Archive \u0026 Cleanup`}),`\n`,_jsxs(Table,{children:[_jsx(_components.thead,{children:_jsxs(_components.tr,{children:[_jsx(_components.th,{children:`Parameter`}),_jsx(_components.th,{children:`Purpose`})]})}),_jsxs(_components.tbody,{children:[_jsxs(_components.tr,{children:[_jsx(_components.td,{children:_jsx(_components.strong,{children:`Archive and clean up the database without archiving and deleting the binary data`})}),_jsx(_components.td,{children:`When selected and a binary storage location is configured, screen captures are kept in binary storage even after the database side of the session is cleaned up or archived. Useful when binary storage retention policies differ from database retention policies.`})]}),_jsxs(_components.tr,{children:[_jsx(_components.td,{children:_jsx(_components.strong,{children:`Delete offline Endpoints without sessions`})}),_jsx(_components.td,{children:`Offline Endpoints that have no recorded sessions are removed from the database during the cleanup process. Prevents orphaned Endpoint records from accumulating when Endpoints are decommissioned before ever recording a session.`})]})]})]}),`\n`,_jsx(Note,{children:_jsxs(_components.p,{children:[`If binary storage uses Amazon S3-like storage, see `,_jsx(_components.a,{href:`/administration/database/binary-storage-s3`,children:`Configure Syteca to Store Binary Data in Amazon S3`}),` for the specific bucket, access key ID, and secret access key configuration.`]})}),`\n`,_jsx(Heading,{level:`2`,id:`clean-up-sessions-of-deleted-endpoints`,children:`Clean up sessions of deleted Endpoints`}),`\n`,_jsx(_components.p,{children:`When a Endpoint is deleted from the Management Tool, most of its data leaves with it. In certain edge cases the Endpoint’s sessions can remain in the database as orphaned records. Use the Server Tray application on the Application Server computer to clean up these leftovers.`}),`\n`,_jsxs(Steps,{children:[_jsxs(Step,{title:`Open Database Parameters from the Server Tray`,children:[_jsxs(_components.p,{children:[`On the Application Server computer, right-click the `,_jsx(_components.strong,{children:`Syteca Server`}),` tray icon in the Notification area and select `,_jsx(_components.strong,{children:`Database Parameters`}),`.`]}),_jsxs(_components.p,{children:[`The `,_jsx(_components.strong,{children:`Database Parameters`}),` application (`,_jsx(_components.code,{children:`DbSetupToolUI`}),`) opens.`]})]}),_jsx(Step,{title:`Open the Advanced tab`,children:_jsxs(_components.p,{children:[`In the Database Parameters application, select the `,_jsx(_components.strong,{children:`Advanced`}),` tab.`]})}),_jsx(Step,{title:`Start the cleanup`,children:_jsxs(_components.p,{children:[`Click `,_jsx(_components.strong,{children:`Clean up lost sessions`}),`. The cleanup runs against the Syteca database and removes orphaned session records from deleted Endpoints.`]})})]}),`\n`,_jsx(Note,{children:_jsxs(_components.p,{children:[`The cleanup can take a long time for large databases. Progress is visible in the Management Tool, on the `,_jsx(_components.strong,{children:`Tasks List`}),` tab of the `,_jsx(_components.strong,{children:`System Health`}),` page. Verify completion there before assuming the operation is done.`]})}),`\n`,_jsx(Heading,{level:`2`,id:`postgresql-autovacuuming`,children:`PostgreSQL autovacuuming`}),`\n`,_jsxs(_components.p,{children:[`PostgreSQL requires periodic maintenance called `,_jsx(_components.strong,{children:`vacuuming`}),`. Vacuuming reclaims storage used by rows that are no longer visible to any transaction, and updates statistics the query planner relies on. Without vacuuming, PostgreSQL databases slowly bloat and query performance degrades.`]}),`\n`,_jsxs(_components.p,{children:[`The `,_jsx(_components.strong,{children:`Autovacuum Daemon`}),` is a set of PostgreSQL processes that vacuum the database automatically based on activity thresholds. It is enabled in the default PostgreSQL configuration and, in most Syteca deployments, requires no intervention.`]}),`\n`,_jsx(Heading,{level:`3`,id:`when-to-change-autovacuum-settings`,children:`When to change autovacuum settings`}),`\n`,_jsx(_components.p,{children:`Adjust autovacuum settings when the Application Server writes are heavy and default autovacuum tuning is not keeping up with the churn. Symptoms include:`}),`\n`,_jsxs(_components.ol,{children:[`\n`,_jsx(_components.li,{children:`Growing database size that outpaces retention-based expectations.`}),`\n`,_jsx(_components.li,{children:`Slowing query performance as tables accumulate dead rows.`}),`\n`,_jsx(_components.li,{children:`Autovacuum log entries indicating the daemon is running frequently and taking a long time to complete.`}),`\n`]}),`\n`,_jsx(Heading,{level:`3`,id:`how-to-change-autovacuum-settings`,children:`How to change autovacuum settings`}),`\n`,_jsxs(_components.p,{children:[`Autovacuum settings live in the PostgreSQL configuration file `,_jsx(_components.code,{children:`postgresql.conf`}),`. The location of `,_jsx(_components.code,{children:`postgresql.conf`}),` varies by operating system and PostgreSQL install method. Common locations:`]}),`\n`,_jsxs(Table,{children:[_jsx(_components.thead,{children:_jsxs(_components.tr,{children:[_jsx(_components.th,{children:`Platform`}),_jsx(_components.th,{children:`Typical location`})]})}),_jsxs(_components.tbody,{children:[_jsxs(_components.tr,{children:[_jsx(_components.td,{children:_jsx(_components.strong,{children:`Windows`})}),_jsx(_components.td,{children:_jsx(_components.code,{children:`C:\\\\Program Files\\\\PostgreSQL\\\\\u003cversion>\\\\data\\\\postgresql.conf`})})]}),_jsxs(_components.tr,{children:[_jsx(_components.td,{children:_jsx(_components.strong,{children:`Ubuntu / Debian`})}),_jsx(_components.td,{children:_jsx(_components.code,{children:`/etc/postgresql/\u003cversion>/main/postgresql.conf`})})]}),_jsxs(_components.tr,{children:[_jsx(_components.td,{children:_jsx(_components.strong,{children:`Red Hat / CentOS`})}),_jsx(_components.td,{children:_jsx(_components.code,{children:`/var/lib/pgsql/\u003cversion>/data/postgresql.conf`})})]})]})]}),`\n`,_jsxs(Steps,{children:[_jsx(Step,{title:`Locate postgresql.conf on the database host`,children:_jsxs(_components.p,{children:[`Find the `,_jsx(_components.code,{children:`postgresql.conf`}),` file on the database server. Use the platform-specific paths above as a starting point.`]})}),_jsx(Step,{title:`Edit the autovacuum settings`,children:_jsxs(_components.p,{children:[`Open `,_jsx(_components.code,{children:`postgresql.conf`}),` in a text editor with administrator or root permissions. Search for the settings beginning with `,_jsx(_components.code,{children:`autovacuum_`}),` and adjust them according to the `,_jsx(_components.a,{href:`https://www.postgresql.org/docs/current/routine-vacuuming.html#AUTOVACUUM`,children:`PostgreSQL documentation on the autovacuum daemon`}),`.`]})}),_jsx(Step,{title:`Restart the PostgreSQL database`,children:_jsxs(_components.p,{children:[`Restart the PostgreSQL database service for the changes to take effect. Configuration changes to `,_jsx(_components.code,{children:`postgresql.conf`}),` are read at PostgreSQL start.`]})})]}),`\n`,_jsx(Warning,{children:_jsx(_components.p,{children:`Restarting the PostgreSQL database disconnects the Syteca Application Server briefly. Plan the restart during a maintenance window when active Endpoint recording can be paused, or accept a brief interruption to Session data ingest while the database service restarts.`})}),`\n`,_jsx(Heading,{level:`2`,id:`recreate-the-activitydb-database-and-attach-it-as-an-archived-database`,children:`Recreate the ActivityDB database and attach it as an archived database`}),`\n`,_jsx(Warning,{children:_jsx(_components.p,{children:_jsx(_components.strong,{children:`NOT AVAILABLE IN SAAS.`})})}),`\n`,_jsxs(Steps,{children:[_jsx(Step,{title:`Log in to the Application Server computer`,children:_jsx(_components.p,{children:`Log in to the machine where Syteca Application Server is installed.`})}),_jsx(Step,{title:`Stop the Application Server`,children:_jsxs(_components.p,{children:[`Stop the `,_jsx(_components.strong,{children:`EkranServer`}),` service.`]})}),_jsx(Step,{title:`Restart the database service`,children:_jsx(_components.p,{children:`Restart your database service to close all existing connections to it.`})}),_jsx(Step,{title:`Rename the existing ActivityDB database`,children:_jsxs(Tabs,{children:[_jsx(Tab,{title:`MS SQL Server`,id:`ms-sql-server`,children:_jsxs(_components.p,{children:[`In SQL Server Management Studio, expand `,_jsx(_components.strong,{children:`Databases`}),`, right-click `,_jsx(_components.code,{children:`EkranActivityDB`}),`, select `,_jsx(_components.strong,{children:`Rename`}),`, and enter a new name.`]})}),_jsxs(Tab,{title:`PostgreSQL`,id:`postgresql`,children:[_jsxs(_components.p,{children:[`In pgAdmin4, check for existing connections to `,_jsx(_components.code,{children:`EkranActivityDB`}),`:`]}),_jsx(CodeBlock,{filename:``,numberOfLines:`1`,language:`sql`,children:_jsx(_components.pre,{className:`shiki shiki-themes github-light-default dark-plus`,style:{backgroundColor:`#ffffff`,\"--shiki-dark-bg\":`#0B0C0E`,color:`#1f2328`,\"--shiki-dark\":`#D4D4D4`},language:`sql`,children:_jsxs(_components.code,{language:`sql`,numberOfLines:`1`,children:[_jsxs(_components.span,{className:`line`,children:[_jsx(_components.span,{style:{color:`#CF222E`,\"--shiki-dark\":`#569CD6`},children:`SELECT`}),_jsx(_components.span,{style:{color:`#CF222E`,\"--shiki-dark\":`#D4D4D4`},children:` *`}),_jsx(_components.span,{style:{color:`#CF222E`,\"--shiki-dark\":`#569CD6`},children:` FROM`}),_jsx(_components.span,{style:{color:`#1F2328`,\"--shiki-dark\":`#D4D4D4`},children:` pg_stat_activity;`})]}),`\n`]})})}),_jsx(_components.p,{children:`Close any existing connections:`}),_jsx(CodeBlock,{filename:``,numberOfLines:`1`,language:`sql`,children:_jsx(_components.pre,{className:`shiki shiki-themes github-light-default dark-plus`,style:{backgroundColor:`#ffffff`,\"--shiki-dark-bg\":`#0B0C0E`,color:`#1f2328`,\"--shiki-dark\":`#D4D4D4`},language:`sql`,children:_jsxs(_components.code,{language:`sql`,numberOfLines:`1`,children:[_jsxs(_components.span,{className:`line`,children:[_jsx(_components.span,{style:{color:`#CF222E`,\"--shiki-dark\":`#569CD6`},children:`SELECT`}),_jsx(_components.span,{style:{color:`#1F2328`,\"--shiki-dark\":`#D4D4D4`},children:` pg_terminate_backend(`}),_jsx(_components.span,{style:{color:`#CF222E`,\"--shiki-dark\":`#D4D4D4`},children:`\u003c`}),_jsx(_components.span,{style:{color:`#1F2328`,\"--shiki-dark\":`#D4D4D4`},children:`pid`}),_jsx(_components.span,{style:{color:`#CF222E`,\"--shiki-dark\":`#D4D4D4`},children:`>`}),_jsx(_components.span,{style:{color:`#1F2328`,\"--shiki-dark\":`#D4D4D4`},children:`);`})]}),`\n`]})})}),_jsxs(_components.p,{children:[`Replace `,_jsx(_components.code,{children:`\u003cpid>`}),` with the value shown for `,_jsx(_components.code,{children:`EkranActivityDB`}),`. Then rename the database:`]}),_jsx(CodeBlock,{filename:``,numberOfLines:`1`,language:`sql`,children:_jsx(_components.pre,{className:`shiki shiki-themes github-light-default dark-plus`,style:{backgroundColor:`#ffffff`,\"--shiki-dark-bg\":`#0B0C0E`,color:`#1f2328`,\"--shiki-dark\":`#D4D4D4`},language:`sql`,children:_jsxs(_components.code,{language:`sql`,numberOfLines:`1`,children:[_jsxs(_components.span,{className:`line`,children:[_jsx(_components.span,{style:{color:`#CF222E`,\"--shiki-dark\":`#569CD6`},children:`ALTER`}),_jsx(_components.span,{style:{color:`#CF222E`,\"--shiki-dark\":`#569CD6`},children:` DATABASE`}),_jsx(_components.span,{style:{color:`#0A3069`,\"--shiki-dark\":`#CE9178`},children:` \"EkranActivityDB\"`}),_jsx(_components.span,{style:{color:`#1F2328`,\"--shiki-dark\":`#D4D4D4`},children:` RENAME `}),_jsx(_components.span,{style:{color:`#CF222E`,\"--shiki-dark\":`#569CD6`},children:`TO`}),_jsx(_components.span,{style:{color:`#0A3069`,\"--shiki-dark\":`#CE9178`},children:` \"newDBname\"`}),_jsx(_components.span,{style:{color:`#1F2328`,\"--shiki-dark\":`#D4D4D4`},children:`;`})]}),`\n`]})})})]})]})}),_jsx(Step,{title:`Restart the database service again`,children:_jsx(_components.p,{children:`Restart the database service now that the rename is complete.`})}),_jsx(Step,{title:`Start the Application Server`,children:_jsxs(_components.p,{children:[`Start the `,_jsx(_components.strong,{children:`EkranServer`}),` service. Since the original `,_jsx(_components.code,{children:`EkranActivityDB`}),` was renamed, Syteca creates a new, empty `,_jsx(_components.code,{children:`EkranActivityDB`}),` under the original name.`]})}),_jsx(Step,{title:`Connect the renamed database as an archived database`,children:_jsxs(_components.p,{children:[`Log in to the Management Tool, open `,_jsx(_components.strong,{children:`Configuration > Database Management`}),`, and connect the renamed database as an archived investigated database. See `,_jsx(_components.a,{href:`/session-monitoring/archived-sessions`,children:`Archived Sessions`}),` for how archived databases are viewed afterward.`]})})]}),`\n`,_jsx(Heading,{level:`2`,id:`vacuum-the-postgresql-database-manually`,children:`Vacuum the PostgreSQL database manually`}),`\n`,_jsx(Warning,{children:_jsx(_components.p,{children:_jsx(_components.strong,{children:`NOT AVAILABLE IN SAAS.`})})}),`\n`,_jsxs(Steps,{children:[_jsx(Step,{title:`Log in to pgAdmin`,children:_jsx(_components.p,{children:`Open pgAdmin and connect to the PostgreSQL server.`})}),_jsx(Step,{title:`Stop the Application Server`,children:_jsxs(_components.p,{children:[`Stop the `,_jsx(_components.strong,{children:`EkranServer`}),` service in Windows Services.`]})}),_jsx(Step,{title:`Run a full vacuum`,children:_jsxs(_components.p,{children:[`Right-click `,_jsx(_components.code,{children:`EkranActivityDB`}),`, select `,_jsx(_components.strong,{children:`Maintenance > Vacuum > Full`}),`, and click `,_jsx(_components.strong,{children:`OK`}),`.`]})}),_jsx(Step,{title:`Restart the Application Server`,children:_jsxs(_components.p,{children:[`Once the vacuum completes, restart the `,_jsx(_components.strong,{children:`EkranServer`}),` service.`]})})]}),`\n`,_jsx(Tip,{children:_jsxs(_components.p,{children:[`For recurring maintenance instead of a one-time manual vacuum, see `,_jsx(_components.a,{href:`/administration/deployment/database-management#postgresql-autovacuuming`,children:`PostgreSQL autovacuuming`}),`.`]})}),`\n`,_jsx(Heading,{level:`2`,id:`how-long-do-cleanup-operations-take`,children:`How long do cleanup operations take?`}),`\n`,_jsx(_components.p,{children:`Cleanup and Archive \u0026 Cleanup duration depends on how many sessions are in the database, their size, and where the archive instance is located.`}),`\n`,_jsx(_components.p,{children:`As a rough estimate: archiving a session whose screen captures are stored in the database takes 3 to 6 minutes; a session whose screen captures are stored in a shared folder takes under a minute.`}),`\n`,_jsx(Note,{children:_jsxs(_components.p,{children:[_jsx(_components.strong,{children:`IN SAAS ONLY:`}),` only the `,_jsx(_components.strong,{children:`Cleanup`}),` operation is available — `,_jsx(_components.strong,{children:`Archive \u0026 Cleanup`}),` isn’t offered in SaaS.`]})}),`\n`,_jsx(Heading,{level:`2`,id:`upgrade-from-an-older-ms-sql-server-version`,children:`Upgrade from an older MS SQL Server version`}),`\n`,_jsx(Warning,{children:_jsx(_components.p,{children:_jsx(_components.strong,{children:`NOT AVAILABLE IN SAAS.`})})}),`\n`,_jsx(_components.p,{children:`To move a Syteca database from an older MS SQL Server version (for example 2008 R2) to a newer one, back it up on the old server and restore it on the new one using SQL Server Management Studio (SSMS). This procedure applies to any older-to-newer MS SQL Server version transfer.`}),`\n`,_jsxs(Steps,{children:[_jsx(Step,{title:`Connect to the source server`,children:_jsxs(_components.p,{children:[`In SSMS, click `,_jsx(_components.strong,{children:`Connect > Database Engine`}),`, and enter the credentials for the source MS SQL Server.`]})}),_jsx(Step,{title:`Back up the database`,children:_jsxs(_components.p,{children:[`In `,_jsx(_components.strong,{children:`Object Explorer`}),`, right-click the required database (for example `,_jsx(_components.code,{children:`SERVER.EkranManagementDatabase`}),`), select `,_jsx(_components.strong,{children:`Tasks > Back Up`}),`.`]})}),_jsxs(Step,{title:`Set the backup location`,children:[_jsxs(_components.p,{children:[`Click `,_jsx(_components.strong,{children:`Add`}),`, then the `,_jsx(_components.strong,{children:`…`}),` button, choose a location and file name, and click `,_jsx(_components.strong,{children:`OK`}),`.`]}),_jsx(Note,{children:_jsx(_components.p,{children:`Note the backup location — you’ll need it in a later step.`})})]}),_jsx(Step,{title:`Connect to the destination server`,children:_jsx(_components.p,{children:`Connect to the destination MS SQL Server the same way as in step 1.`})}),_jsx(Step,{title:`Create a new database with the same name`,children:_jsxs(_components.p,{children:[`Right-click `,_jsx(_components.strong,{children:`Databases`}),`, select `,_jsx(_components.strong,{children:`New Database`}),`, and enter the exact same database name as the one backed up.`]})}),_jsx(Step,{title:`Restore from the backup`,children:_jsxs(_components.p,{children:[`Right-click the new database, select `,_jsx(_components.strong,{children:`Tasks > Restore > Database`}),`. Under `,_jsx(_components.strong,{children:`Source`}),`, select `,_jsx(_components.strong,{children:`Device`}),`, click the `,_jsx(_components.strong,{children:`…`}),` button, `,_jsx(_components.strong,{children:`Add`}),`, and select the backup file.`]})}),_jsx(Step,{title:`Relocate the database files`,children:_jsxs(_components.p,{children:[`On the `,_jsx(_components.strong,{children:`Files`}),` page of the restore dialog, select `,_jsx(_components.strong,{children:`Relocate all files to folder`}),`.`]})}),_jsx(Step,{title:`Allow overwriting`,children:_jsxs(_components.p,{children:[`On the `,_jsx(_components.strong,{children:`Options`}),` page, select `,_jsx(_components.strong,{children:`Overwrite the existing database (WITH REPLACE)`}),`.`]})}),_jsx(Step,{title:`Complete the restore`,children:_jsxs(_components.p,{children:[`Click `,_jsx(_components.strong,{children:`OK`}),`. A confirmation message appears once the restore succeeds.`]})})]}),`\n`,_jsx(Frame,{caption:`Relocating database files during restore in SQL Server Management Studio.`,children:_jsx(OptimizedImage,{src:`https://mintcdn.com/syteca/0FlD-vkHsBA1azVX/images/administration/deployment/ms-sql-restore-relocate-files.png?fit=max\u0026auto=format\u0026n=0FlD-vkHsBA1azVX\u0026q=85\u0026s=206173229ba346a03ce5dc8d71ecc077`,alt:`SSMS restore dialog Files page with Relocate all files to folder selected`,\"data-og-width\":`1511`,width:`1511`,\"data-og-height\":`770`,height:`770`,\"data-path\":`images/administration/deployment/ms-sql-restore-relocate-files.png`,\"data-optimize\":`true`,\"data-opv\":`3`,srcset:`https://mintcdn.com/syteca/0FlD-vkHsBA1azVX/images/administration/deployment/ms-sql-restore-relocate-files.png?w=280\u0026fit=max\u0026auto=format\u0026n=0FlD-vkHsBA1azVX\u0026q=85\u0026s=454f269abaf0cae5dcb489dd2159918d 280w, https://mintcdn.com/syteca/0FlD-vkHsBA1azVX/images/administration/deployment/ms-sql-restore-relocate-files.png?w=560\u0026fit=max\u0026auto=format\u0026n=0FlD-vkHsBA1azVX\u0026q=85\u0026s=51d2b4a7c77248356f28f964db733ac6 560w, https://mintcdn.com/syteca/0FlD-vkHsBA1azVX/images/administration/deployment/ms-sql-restore-relocate-files.png?w=840\u0026fit=max\u0026auto=format\u0026n=0FlD-vkHsBA1azVX\u0026q=85\u0026s=295597562a649bc7439f3ae11d43608d 840w, https://mintcdn.com/syteca/0FlD-vkHsBA1azVX/images/administration/deployment/ms-sql-restore-relocate-files.png?w=1100\u0026fit=max\u0026auto=format\u0026n=0FlD-vkHsBA1azVX\u0026q=85\u0026s=b9762bcaa04fc3dae7d1f30ecafe7290 1100w, https://mintcdn.com/syteca/0FlD-vkHsBA1azVX/images/administration/deployment/ms-sql-restore-relocate-files.png?w=1650\u0026fit=max\u0026auto=format\u0026n=0FlD-vkHsBA1azVX\u0026q=85\u0026s=429dbee021bc658016009ca7a91ab776 1650w, https://mintcdn.com/syteca/0FlD-vkHsBA1azVX/images/administration/deployment/ms-sql-restore-relocate-files.png?w=2500\u0026fit=max\u0026auto=format\u0026n=0FlD-vkHsBA1azVX\u0026q=85\u0026s=231757e3ad24cfb5f2a39bd85442a45b 2500w`})}),`\n`,_jsx(Heading,{level:`2`,id:`shrink-the-ms-sql-database-transaction-log`,children:`Shrink the MS SQL database transaction log`}),`\n`,_jsx(Warning,{children:_jsx(_components.p,{children:_jsx(_components.strong,{children:`NOT AVAILABLE IN SAAS.`})})}),`\n`,_jsxs(Steps,{children:[_jsx(Step,{title:`Open Database Management`,children:_jsxs(_components.p,{children:[`Log in to the Management Tool as a user with the `,_jsx(_components.a,{href:`/administration/users/administrative-permissions`,children:`administrative Database Management permission`}),`, click `,_jsx(_components.strong,{children:`Configuration`}),`, then select the `,_jsx(_components.strong,{children:`Database Management`}),` tab.`]})}),_jsx(Step,{title:`Shrink the log`,children:_jsxs(_components.p,{children:[`Click `,_jsx(_components.strong,{children:`Shrink Transaction Log`}),` at the bottom of the page.`]})})]}),`\n`,_jsx(Note,{children:_jsx(_components.p,{children:`No progress indicator is shown, and there’s no notification when shrinking completes.`})}),`\n`,_jsx(Warning,{children:_jsx(_components.p,{children:`Not supported if the MS SQL database is part of an SQL availability group — the System Health page explains why in that case. Shrinking also can’t run while a database cleanup is already in progress.`})}),`\n`,_jsx(Heading,{level:`2`,id:`set-up-hash-code-calculation-for-monitoring-data-validation`,children:`Set up hash-code calculation for monitoring data validation`}),`\n`,_jsx(Warning,{children:_jsxs(_components.p,{children:[_jsx(_components.strong,{children:`NOT AVAILABLE IN SAAS.`}),` Contact your Syteca vendor or the Syteca Support team to enable this in a SaaS environment.`]})}),`\n`,_jsxs(_components.p,{children:[`This enables the hash-code option described in `,_jsx(_components.a,{href:`#validate-monitoring-data-integrity`,children:`Validate monitoring data integrity`}),` above — a lighter-weight alternative to certificate signing.`]}),`\n`,_jsxs(Tabs,{children:[_jsx(Tab,{title:`Version 6.53.1 and later`,id:`version-6-53-1-and-later`,children:_jsxs(Steps,{children:[_jsx(Step,{title:`Stop the Application Server`,children:_jsxs(_components.p,{children:[`Right-click the `,_jsx(_components.strong,{children:`Syteca Server`}),` tray icon and select `,_jsx(_components.strong,{children:`Stop`}),`, or stop the `,_jsx(_components.strong,{children:`EkranServer`}),` service via Task Manager.`]})}),_jsxs(Step,{title:`Add the key to the config file`,children:[_jsxs(_components.p,{children:[`Open `,_jsx(_components.code,{children:`EkranServer.Settings.config`}),` (by default in `,_jsx(_components.code,{children:`C:\\\\Program Files\\\\Ekran System\\\\Ekran System\\\\Server`}),`) and add:`]}),_jsx(CodeBlock,{filename:``,numberOfLines:`1`,language:`xml`,children:_jsx(_components.pre,{className:`shiki shiki-themes github-light-default dark-plus`,style:{backgroundColor:`#ffffff`,\"--shiki-dark-bg\":`#0B0C0E`,color:`#1f2328`,\"--shiki-dark\":`#D4D4D4`},language:`xml`,children:_jsxs(_components.code,{language:`xml`,numberOfLines:`1`,children:[_jsxs(_components.span,{className:`line`,children:[_jsx(_components.span,{style:{color:`#1F2328`,\"--shiki-dark\":`#808080`},children:`\u003c`}),_jsx(_components.span,{style:{color:`#116329`,\"--shiki-dark\":`#569CD6`},children:`add`}),_jsx(_components.span,{style:{color:`#0550AE`,\"--shiki-dark\":`#9CDCFE`},children:` key`}),_jsx(_components.span,{style:{color:`#1F2328`,\"--shiki-dark\":`#D4D4D4`},children:`=`}),_jsx(_components.span,{style:{color:`#0A3069`,\"--shiki-dark\":`#CE9178`},children:`\"SignMonitoredData\"`}),_jsx(_components.span,{style:{color:`#0550AE`,\"--shiki-dark\":`#9CDCFE`},children:` value`}),_jsx(_components.span,{style:{color:`#1F2328`,\"--shiki-dark\":`#D4D4D4`},children:`=`}),_jsx(_components.span,{style:{color:`#0A3069`,\"--shiki-dark\":`#CE9178`},children:`\"1\"`}),_jsx(_components.span,{style:{color:`#1F2328`,\"--shiki-dark\":`#808080`},children:` />`})]}),`\n`]})})})]}),_jsx(Step,{title:`Start the Application Server`,children:_jsxs(_components.p,{children:[`Start the `,_jsx(_components.strong,{children:`EkranServer`}),` service again.`]})})]})}),_jsxs(Tab,{title:`Versions before 6.53.1`,id:`versions-before-6-53-1`,children:[_jsxs(Steps,{children:[_jsx(Step,{title:`Stop the Application Server`,children:_jsxs(_components.p,{children:[`Right-click the `,_jsx(_components.strong,{children:`Syteca Server`}),` tray icon and select `,_jsx(_components.strong,{children:`Stop`}),`, or stop the `,_jsx(_components.strong,{children:`EkranServer`}),` service via Task Manager.`]})}),_jsx(Step,{title:`Set the registry value`,children:_jsxs(_components.p,{children:[`Open Windows Registry Editor, select `,_jsx(_components.code,{children:`HKEY_LOCAL_MACHINE\\\\SOFTWARE\\\\EkranSystem`}),`, and add a new `,_jsx(_components.strong,{children:`DWORD (32-bit)`}),` value named `,_jsx(_components.code,{children:`SignMonitoredData`}),` with data `,_jsx(_components.code,{children:`1`}),`.`]})}),_jsx(Step,{title:`Start the Application Server`,children:_jsxs(_components.p,{children:[`Start the `,_jsx(_components.strong,{children:`EkranServer`}),` service again.`]})})]}),_jsx(Note,{children:_jsxs(_components.p,{children:[`After updating to version 6.53.1 or later, this setting moves from the registry to `,_jsx(_components.code,{children:`EkranServer.Settings.config`}),` automatically, and further changes must be made in that file.`]})})]})]}),`\n`,_jsx(Heading,{level:`2`,id:`set-up-certificate-signing-for-monitoring-data-validation`,children:`Set up certificate signing for monitoring data validation`}),`\n`,_jsx(Warning,{children:_jsxs(_components.p,{children:[_jsx(_components.strong,{children:`NOT AVAILABLE IN SAAS.`}),` Contact your Syteca vendor or the Syteca Support team to enable this in a SaaS environment.`]})}),`\n`,_jsxs(_components.p,{children:[`This completes the certificate-signing option described in `,_jsx(_components.a,{href:`#validate-monitoring-data-integrity`,children:`Validate monitoring data integrity`}),` above. Do the following on the Application Server computer.`]}),`\n`,_jsx(Heading,{level:`3`,id:`1-import-a-trusted-certificate`,children:`1. Import a trusted certificate`}),`\n`,_jsxs(Steps,{children:[_jsx(Step,{title:`Open the Certificates snap-in`,children:_jsxs(_components.p,{children:[`Press `,_jsx(_components.strong,{children:`Windows+R`}),`, enter `,_jsx(_components.code,{children:`mmc`}),`, press `,_jsx(_components.strong,{children:`Enter`}),`, and click `,_jsx(_components.strong,{children:`Yes`}),` on the User Account Control prompt. Select `,_jsx(_components.strong,{children:`File > Add/Remove Snap-in`}),`, choose `,_jsx(_components.strong,{children:`Certificates`}),`, and click `,_jsx(_components.strong,{children:`Add`}),`.`]})}),_jsx(Step,{title:`Target the local computer account`,children:_jsxs(_components.p,{children:[`Select `,_jsx(_components.strong,{children:`Computer account`}),`, click `,_jsx(_components.strong,{children:`Next`}),`, select `,_jsx(_components.strong,{children:`Local computer: (the computer this console is running on)`}),`, and click `,_jsx(_components.strong,{children:`Finish`}),`, then `,_jsx(_components.strong,{children:`OK`}),`.`]})}),_jsx(Step,{title:`Import the certificate`,children:_jsxs(_components.p,{children:[`Under `,_jsx(_components.strong,{children:`Certificates (Local Computer)`}),`, right-click `,_jsx(_components.strong,{children:`Personal`}),`, select `,_jsx(_components.strong,{children:`All Tasks > Import`}),`, and step through the Certificate Import Wizard: browse to the certificate file, enter its private key password if prompted, and finish the wizard.`]})}),_jsx(Step,{title:`Copy the certificate's thumbprint`,children:_jsxs(_components.p,{children:[`Under `,_jsx(_components.strong,{children:`Certificates (Local Computer) > Personal > Certificates`}),`, double-click the imported certificate, select `,_jsx(_components.strong,{children:`Details > Thumbprint`}),`, and copy the value shown.`]})})]}),`\n`,_jsx(Heading,{level:`3`,id:`2-enable-signing-with-the-certificate`,children:`2. Enable signing with the certificate`}),`\n`,_jsxs(Tabs,{children:[_jsx(Tab,{title:`Version 6.53.1 and later`,id:`version-6-53-1-and-later-2`,children:_jsxs(Steps,{children:[_jsx(Step,{title:`Stop the Application Server`,children:_jsxs(_components.p,{children:[`Right-click the `,_jsx(_components.strong,{children:`Syteca Server`}),` tray icon and select `,_jsx(_components.strong,{children:`Stop`}),`, or stop the `,_jsx(_components.strong,{children:`EkranServer`}),` service via Task Manager.`]})}),_jsxs(Step,{title:`Add the key to the config file`,children:[_jsxs(_components.p,{children:[`Open `,_jsx(_components.code,{children:`EkranServer.Settings.config`}),` (by default in `,_jsx(_components.code,{children:`C:\\\\Program Files\\\\Ekran System\\\\Ekran System\\\\Server`}),`) and add:`]}),_jsx(CodeBlock,{filename:``,numberOfLines:`1`,language:`xml`,children:_jsx(_components.pre,{className:`shiki shiki-themes github-light-default dark-plus`,style:{backgroundColor:`#ffffff`,\"--shiki-dark-bg\":`#0B0C0E`,color:`#1f2328`,\"--shiki-dark\":`#D4D4D4`},language:`xml`,children:_jsxs(_components.code,{language:`xml`,numberOfLines:`1`,children:[_jsxs(_components.span,{className:`line`,children:[_jsx(_components.span,{style:{color:`#1F2328`,\"--shiki-dark\":`#808080`},children:`\u003c`}),_jsx(_components.span,{style:{color:`#116329`,\"--shiki-dark\":`#569CD6`},children:`add`}),_jsx(_components.span,{style:{color:`#0550AE`,\"--shiki-dark\":`#9CDCFE`},children:` key`}),_jsx(_components.span,{style:{color:`#1F2328`,\"--shiki-dark\":`#D4D4D4`},children:`=`}),_jsx(_components.span,{style:{color:`#0A3069`,\"--shiki-dark\":`#CE9178`},children:`\"SignMonitoredDataCert\"`}),_jsx(_components.span,{style:{color:`#0550AE`,\"--shiki-dark\":`#9CDCFE`},children:` value`}),_jsx(_components.span,{style:{color:`#1F2328`,\"--shiki-dark\":`#D4D4D4`},children:`=`}),_jsx(_components.span,{style:{color:`#0A3069`,\"--shiki-dark\":`#CE9178`},children:`\"\u003ccopied Thumbprint value, no spaces>\"`}),_jsx(_components.span,{style:{color:`#1F2328`,\"--shiki-dark\":`#808080`},children:` />`})]}),`\n`]})})})]}),_jsx(Step,{title:`Start the Application Server`,children:_jsxs(_components.p,{children:[`Start the `,_jsx(_components.strong,{children:`EkranServer`}),` service again.`]})})]})}),_jsxs(Tab,{title:`Versions before 6.53.1`,id:`versions-before-6-53-1-2`,children:[_jsxs(Steps,{children:[_jsx(Step,{title:`Stop the Application Server`,children:_jsxs(_components.p,{children:[`Right-click the `,_jsx(_components.strong,{children:`Syteca Server`}),` tray icon and select `,_jsx(_components.strong,{children:`Stop`}),`, or stop the `,_jsx(_components.strong,{children:`EkranServer`}),` service via Task Manager.`]})}),_jsx(Step,{title:`Set the registry value`,children:_jsxs(_components.p,{children:[`Open Windows Registry Editor, select `,_jsx(_components.code,{children:`HKEY_LOCAL_MACHINE\\\\SOFTWARE\\\\EkranSystem`}),`, and add a new `,_jsx(_components.strong,{children:`String Value`}),` named `,_jsx(_components.code,{children:`SignMonitoredDataCert`}),` with the copied Thumbprint value (no spaces) as its data.`]})}),_jsx(Step,{title:`Start the Application Server`,children:_jsxs(_components.p,{children:[`Start the `,_jsx(_components.strong,{children:`EkranServer`}),` service again.`]})})]}),_jsx(Note,{children:_jsxs(_components.p,{children:[`After updating to version 6.53.1 or later, this setting moves from the registry to `,_jsx(_components.code,{children:`EkranServer.Settings.config`}),` automatically, and further changes must be made in that file.`]})})]})]}),`\n`,_jsx(Heading,{level:`2`,id:`delete-the-postgresql-database-manually`,children:`Delete the PostgreSQL database manually`}),`\n`,_jsx(Warning,{children:_jsx(_components.p,{children:_jsx(_components.strong,{children:`NOT AVAILABLE IN SAAS.`})})}),`\n`,_jsx(_components.p,{children:`If the PostgreSQL database wasn’t removed automatically when the Application Server was uninstalled, delete it manually. Only the database owner or a superuser can do this.`}),`\n`,_jsx(Warning,{children:_jsx(_components.p,{children:`Deleting a database can’t be undone.`})}),`\n`,_jsxs(Steps,{children:[_jsx(Step,{title:`Restart the PostgreSQL server`,children:_jsx(_components.p,{children:`Restart the PostgreSQL server before deleting the database.`})}),_jsx(Step,{title:`Open pgAdmin`,children:_jsxs(_components.p,{children:[`Start `,_jsx(_components.strong,{children:`pgAdmin`}),` and connect to the server.`]})}),_jsxs(Step,{title:`Select the databases to delete`,children:[_jsxs(_components.p,{children:[`In the `,_jsx(_components.strong,{children:`Browser`}),` pane, select the database to delete. By default, Syteca uses two databases:`]}),_jsxs(_components.ul,{children:[`\n`,_jsx(_components.li,{children:_jsx(_components.code,{children:`ekranactivitydb`})}),`\n`,_jsx(_components.li,{children:_jsx(_components.code,{children:`ekranmanagementdatabase`})}),`\n`]})]}),_jsx(Step,{title:`Delete each database`,children:_jsxs(_components.p,{children:[`Right-click each database and select `,_jsx(_components.strong,{children:`Delete/Drop`}),`, then click `,_jsx(_components.strong,{children:`OK`}),` to confirm.`]})})]}),`\n`,_jsx(Heading,{level:`2`,id:`validate-monitoring-data-integrity`,children:`Validate monitoring data integrity`}),`\n`,_jsx(Warning,{children:_jsxs(_components.p,{children:[_jsx(_components.strong,{children:`NOT AVAILABLE IN SAAS.`}),` Contact your Syteca vendor or the Syteca Support team to enable this in a SaaS environment.`]})}),`\n`,_jsx(_components.p,{children:`Monitoring data validation confirms that screen captures and metadata received from Windows Endpoint haven’t been altered in the database. It’s available for both PostgreSQL and MS SQL Server.`}),`\n`,_jsx(_components.p,{children:`Two validation types are available:`}),`\n`,_jsxs(_components.ul,{children:[`\n`,_jsxs(_components.li,{children:[_jsx(_components.strong,{children:`Calculate hash codes`}),` — a hash is calculated for each screen capture and metadata record received.`]}),`\n`,_jsxs(_components.li,{children:[_jsx(_components.strong,{children:`Sign with a certificate`}),` — each screen capture and metadata record is signed with a trusted certificate.`]}),`\n`]}),`\n`,_jsx(Note,{children:_jsx(_components.p,{children:`If both are enabled, only certificate signing is actually used.`})}),`\n`,_jsx(Warning,{children:_jsx(_components.p,{children:`Enabling validation, or changing the validation type, invalidates every previously recorded Windows Endpoint session.`})}),`\n`,_jsxs(_components.p,{children:[`Once enabled, opening a Windows Endpoint session in the Session Player checks the integrity of its data. If any screen captures or metadata records were deleted or modified, the Session Player displays `,_jsx(_components.strong,{children:`“Session data is not valid!”`})]}),`\n`,_jsx(Note,{children:_jsx(_components.p,{children:`Enabling validation increases CPU usage while viewing sessions in the Session Player. Screen captures won’t display for existing sessions that hadn’t been viewed before validation was enabled.`})}),`\n`,_jsx(Heading,{level:`2`,id:`isolate-the-database-from-endpoints`,children:`Isolate the database from Endpoints`}),`\n`,_jsx(Warning,{children:_jsx(_components.p,{children:_jsx(_components.strong,{children:`NOT AVAILABLE IN SAAS.`})})}),`\n`,_jsx(_components.p,{children:`Isolation mode temporarily disconnects every Endpoints from the database, useful when fixing database issues, running cleanup, or performing maintenance. While isolated, Endpoints keep monitoring and write data to their local cache until reconnected.`}),`\n`,_jsx(Note,{children:_jsxs(_components.p,{children:[`Only available to users of the built-in default tenant with the `,_jsx(_components.a,{href:`/administration/users/administrative-permissions`,children:`administrative Tenant Management and System Configuration permission`}),` — for example, members of the Administrators user group.`]})}),`\n`,_jsxs(Steps,{children:[_jsx(Step,{title:`Open System Health`,children:_jsxs(_components.p,{children:[`Click `,_jsx(_components.strong,{children:`System Health`}),`, then the drop-down next to the `,_jsx(_components.strong,{children:`System State`}),` tab.`]})}),_jsx(Step,{title:`Enable isolation`,children:_jsxs(_components.p,{children:[`Select `,_jsx(_components.strong,{children:`Isolate Database from Endpoints`}),`.`]})})]}),`\n`,_jsx(_components.p,{children:`While enabled, every Endpoint operates offline and writes to its local cache. Data flows to the Application Server automatically as soon as isolation is disabled.`}),`\n`,_jsxs(Steps,{children:[_jsx(Step,{title:`Open System Health`,children:_jsxs(_components.p,{children:[`Click `,_jsx(_components.strong,{children:`System Health`}),`, then the drop-down next to the `,_jsx(_components.strong,{children:`System State`}),` tab.`]})}),_jsx(Step,{title:`Disable isolation`,children:_jsxs(_components.p,{children:[`Select `,_jsx(_components.strong,{children:`Stop Isolating Database from Endpoints`}),` (or click the `,_jsx(_components.strong,{children:`here`}),` link in the notification banner shown at the top of every page while isolation is active).`]})})]}),`\n`,_jsx(Warning,{children:_jsx(_components.p,{children:`After a long isolation period, disabling it causes a network load spike as every Endpoint sends its accumulated offline data at once.`})}),`\n`,_jsx(Heading,{level:`2`,id:`related`,children:`Related`}),`\n`,_jsxs(CardGroup,{cols:2,children:[_jsx(Card,{title:`Application Server troubleshooting`,icon:`wrench`,href:`/resources/troubleshooting/application-server-troubleshooting`,children:_jsx(_components.p,{children:`Diagnose Application Server issues, including database connection loss and Management Tool availability errors.`})}),_jsx(Card,{title:`Application Server resource monitoring`,icon:`chart-line`,href:`/administration/dashboards/application-server-monitoring`,children:_jsx(_components.p,{children:`Watch the database write queue and storage usage in real time from the System State page.`})}),_jsx(Card,{title:`System requirements`,icon:`server`,href:`/get-started/system-requirements`,children:_jsx(_components.p,{children:`Database sizing, supported PostgreSQL and MS SQL versions, and network port requirements.`})}),_jsx(Card,{title:`Shared storage HA`,icon:`hard-drive`,href:`/administration/deployment/shared-storage-ha`,children:_jsx(_components.p,{children:`Move screen captures out of the database to shared storage, reducing database growth substantially.`})})]})]})}function MDXContent(props={}){const{wrapper:MDXLayout}={..._provideComponents(),...props.components};return MDXLayout?_jsx(MDXLayout,{...props,children:_jsx(_createMdxContent,{...props})}):_createMdxContent(props)}return{default:MDXContent};function _missingMdxReference(id,component){throw new Error(`Expected `+(component?`component`:`object`)+\" `\"+id+\"` to be defined: you likely forgot to import, pass, or provide it.\")}","frontmatter":{},"scope":{"codeStyling":"system","config":{},"pageMetadata":{"title":"Database Management","sidebarTitle":"Database management","description":"Manage the Syteca database over its lifetime. Configure Archive and Cleanup operations, clean up sessions left behind by deleted Endpoints, and tune PostgreSQL autovacuuming to keep the database healthy under sustained write load.","icon":"database","keywords":["syteca database management","archive cleanup parameters syteca","postgresql autovacuum syteca","clean up deleted endpoint sessions","server tray database parameters","syteca database maintenance"],"href":"/administration/deployment/database-management"}}},"mdxSourceWithNoJs":null},"mdxExtracts":{"tableOfContents":[{"title":"Archive and Cleanup parameters","slug":"archive-and-cleanup-parameters","depth":2,"children":[{"title":"Where to configure","slug":"where-to-configure","depth":3,"children":[]},{"title":"Parameters applied to Archive \u0026 Cleanup for both PostgreSQL and MS SQL Server","slug":"parameters-applied-to-archive-\u0026-cleanup-for-both-postgresql-and-ms-sql-server","depth":3,"children":[]},{"title":"Parameters applied only to Archive \u0026 Cleanup on MS SQL Server","slug":"parameters-applied-only-to-archive-\u0026-cleanup-on-ms-sql-server","depth":3,"children":[]},{"title":"Parameters applied to both Cleanup and Archive \u0026 Cleanup","slug":"parameters-applied-to-both-cleanup-and-archive-\u0026-cleanup","depth":3,"children":[]}]},{"title":"Clean up sessions of deleted Endpoints","slug":"clean-up-sessions-of-deleted-endpoints","depth":2,"children":[]},{"title":"PostgreSQL autovacuuming","slug":"postgresql-autovacuuming","depth":2,"children":[{"title":"When to change autovacuum settings","slug":"when-to-change-autovacuum-settings","depth":3,"children":[]},{"title":"How to change autovacuum settings","slug":"how-to-change-autovacuum-settings","depth":3,"children":[]}]},{"title":"Recreate the ActivityDB database and attach it as an archived database","slug":"recreate-the-activitydb-database-and-attach-it-as-an-archived-database","depth":2,"children":[]},{"title":"Vacuum the PostgreSQL database manually","slug":"vacuum-the-postgresql-database-manually","depth":2,"children":[]},{"title":"How long do cleanup operations take?","slug":"how-long-do-cleanup-operations-take","depth":2,"children":[]},{"title":"Upgrade from an older MS SQL Server version","slug":"upgrade-from-an-older-ms-sql-server-version","depth":2,"children":[]},{"title":"Shrink the MS SQL database transaction log","slug":"shrink-the-ms-sql-database-transaction-log","depth":2,"children":[]},{"title":"Set up hash-code calculation for monitoring data validation","slug":"set-up-hash-code-calculation-for-monitoring-data-validation","depth":2,"children":[]},{"title":"Set up certificate signing for monitoring data validation","slug":"set-up-certificate-signing-for-monitoring-data-validation","depth":2,"children":[{"title":"1. Import a trusted certificate","slug":"1-import-a-trusted-certificate","depth":3,"children":[]},{"title":"2. Enable signing with the certificate","slug":"2-enable-signing-with-the-certificate","depth":3,"children":[]}]},{"title":"Delete the PostgreSQL database manually","slug":"delete-the-postgresql-database-manually","depth":2,"children":[]},{"title":"Validate monitoring data integrity","slug":"validate-monitoring-data-integrity","depth":2,"children":[]},{"title":"Isolate the database from Endpoints","slug":"isolate-the-database-from-endpoints","depth":2,"children":[]},{"title":"Related","slug":"related","depth":2,"children":[]}],"codeExamples":{}},"jsLinks":[],"subdomain":"syteca","siteName":"Syteca","title":"Database Management - Syteca","navMaps":{"firstHrefInVersion":{},"firstHrefInLanguage":{}},"lastModified":"2026-10-07T08:31:26.677Z","originalFileLocation":"administration/deployment/database-management.mdx"},"headHtml":"\u003cmeta data-mint-head name=\"description\" content=\"Manage the Syteca database over its lifetime. Configure Archive and Cleanup operations, clean up sessions left behind by deleted Endpoints, and tune PostgreSQL autovacuuming to keep the database healthy under sustained write load.\">\u003cmeta data-mint-head name=\"application-name\" content=\"Syteca\">\u003cmeta data-mint-head name=\"generator\" content=\"Mintlify\">\u003clink data-mint-head rel=\"icon\" type=\"image/png\" sizes=\"192x192\" href=\"/docs/mintlify-assets/_mintlify/favicons/syteca/6kVJ1RNAbG010Toj/_generated/favicon/android-chrome-192x192.png\" media=\"(prefers-color-scheme: light)\">\u003clink data-mint-head rel=\"apple-touch-icon\" type=\"image/png\" sizes=\"180x180\" href=\"/docs/mintlify-assets/_mintlify/favicons/syteca/6kVJ1RNAbG010Toj/_generated/favicon/apple-touch-icon.png\">\u003clink data-mint-head rel=\"icon\" type=\"image/png\" sizes=\"16x16\" href=\"/docs/mintlify-assets/_mintlify/favicons/syteca/6kVJ1RNAbG010Toj/_generated/favicon/favicon-16x16.png\" media=\"(prefers-color-scheme: light)\">\u003clink data-mint-head rel=\"icon\" type=\"image/png\" sizes=\"32x32\" href=\"/docs/mintlify-assets/_mintlify/favicons/syteca/6kVJ1RNAbG010Toj/_generated/favicon/favicon-32x32.png\" media=\"(prefers-color-scheme: light)\">\u003clink data-mint-head rel=\"shortcut icon\" type=\"image/x-icon\" href=\"/docs/mintlify-assets/_mintlify/favicons/syteca/6kVJ1RNAbG010Toj/_generated/favicon/favicon.ico\" media=\"(prefers-color-scheme: light)\">\u003clink data-mint-head rel=\"icon\" type=\"image/png\" sizes=\"192x192\" href=\"/docs/mintlify-assets/_mintlify/favicons/syteca/6kVJ1RNAbG010Toj/_generated/favicon-dark/android-chrome-192x192.png\" media=\"(prefers-color-scheme: dark)\">\u003clink data-mint-head rel=\"icon\" type=\"image/png\" sizes=\"16x16\" href=\"/docs/mintlify-assets/_mintlify/favicons/syteca/6kVJ1RNAbG010Toj/_generated/favicon-dark/favicon-16x16.png\" media=\"(prefers-color-scheme: dark)\">\u003clink data-mint-head rel=\"icon\" type=\"image/png\" sizes=\"32x32\" href=\"/docs/mintlify-assets/_mintlify/favicons/syteca/6kVJ1RNAbG010Toj/_generated/favicon-dark/favicon-32x32.png\" media=\"(prefers-color-scheme: dark)\">\u003clink data-mint-head rel=\"shortcut icon\" type=\"image/x-icon\" href=\"/docs/mintlify-assets/_mintlify/favicons/syteca/6kVJ1RNAbG010Toj/_generated/favicon-dark/favicon.ico\" media=\"(prefers-color-scheme: dark)\">\u003cmeta data-mint-head property=\"og:title\" content=\"Database Management - Syteca\">\u003cmeta data-mint-head property=\"og:description\" content=\"Manage the Syteca database over its lifetime. Configure Archive and Cleanup operations, clean up sessions left behind by deleted Endpoints, and tune PostgreSQL autovacuuming to keep the database healthy under sustained write load.\">\u003cmeta data-mint-head property=\"og:site_name\" content=\"Syteca Docs\">\u003cmeta data-mint-head property=\"og:url\" content=\"https://www.syteca.com/docs/administration/deployment/database-management\">\u003cmeta data-mint-head property=\"og:type\" content=\"website\">\u003cmeta data-mint-head property=\"og:image\" content=\"https://www.syteca.com/og-default.png\">\u003cmeta data-mint-head property=\"og:image:width\" content=\"1200\">\u003cmeta data-mint-head property=\"og:image:height\" content=\"630\">\u003cmeta data-mint-head name=\"twitter:card\" content=\"summary_large_image\">\u003cmeta data-mint-head name=\"twitter:title\" content=\"Database Management - Syteca\">\u003cmeta data-mint-head name=\"twitter:description\" content=\"Manage the Syteca database over its lifetime. Configure Archive and Cleanup operations, clean up sessions left behind by deleted Endpoints, and tune PostgreSQL autovacuuming to keep the database healthy under sustained write load.\">\u003cmeta data-mint-head name=\"twitter:image\" content=\"https://www.syteca.com/og-default.png\">\u003cmeta data-mint-head name=\"twitter:image:width\" content=\"1200\">\u003cmeta data-mint-head name=\"twitter:image:height\" content=\"630\">\u003cmeta data-mint-head name=\"msapplication-config\" content=\"/docs/mintlify-assets/_mintlify/favicons/syteca/6kVJ1RNAbG010Toj/_generated/favicon/browserconfig.xml\">\u003cmeta data-mint-head name=\"apple-mobile-web-app-title\" content=\"Syteca\">\u003cmeta data-mint-head name=\"msapplication-TileColor\" content=\"#2563EB\">\u003clink data-mint-head rel=\"canonical\" href=\"https://www.syteca.com/docs/administration/deployment/database-management\">\u003clink data-mint-head rel=\"alternate\" type=\"application/xml\" href=\"/docs/sitemap.xml\">\u003clink data-mint-head rel=\"alternate\" type=\"text/markdown\" href=\"/docs/administration/deployment/database-management.md\">\u003cscript data-mint-head type=\"application/ld+json\">{\"@context\":\"https://schema.org\",\"@graph\":[{\"@type\":\"Organization\",\"@id\":\"https://www.syteca.com/#organization\",\"name\":\"Syteca\",\"url\":\"https://www.syteca.com\",\"logo\":{\"@type\":\"ImageObject\",\"url\":\"https://mintcdn.com/syteca/ZVta4JfIcSnC47NX/logo/syteca-light.svg?fit=max\u0026auto=format\u0026n=ZVta4JfIcSnC47NX\u0026q=85\u0026s=154a18f69aa4aefa55de0de7669934c7\"}},{\"@type\":\"WebSite\",\"@id\":\"https://www.syteca.com/docs#website\",\"name\":\"Syteca\",\"url\":\"https://www.syteca.com/docs\",\"publisher\":{\"@id\":\"https://www.syteca.com/#organization\"}},{\"@type\":\"WebPage\",\"@id\":\"https://www.syteca.com/docs/administration/deployment/database-management#webpage\",\"url\":\"https://www.syteca.com/docs/administration/deployment/database-management\",\"name\":\"Database Management\",\"description\":\"Manage the Syteca database over its lifetime. Configure Archive and Cleanup operations, clean up sessions left behind by deleted Endpoints, and tune PostgreSQL autovacuuming to keep the database healthy under sustained write load.\",\"dateModified\":\"2026-10-07T08:31:26.677Z\",\"isPartOf\":{\"@id\":\"https://www.syteca.com/docs#website\"},\"breadcrumb\":{\"@id\":\"https://www.syteca.com/docs/administration/deployment/database-management#breadcrumb\"}},{\"@type\":\"BreadcrumbList\",\"@id\":\"https://www.syteca.com/docs/administration/deployment/database-management#breadcrumb\",\"itemListElement\":[{\"@type\":\"ListItem\",\"position\":1,\"name\":\"Syteca\",\"item\":\"https://www.syteca.com/docs\"},{\"@type\":\"ListItem\",\"position\":2,\"name\":\"Database Management\",\"item\":\"https://www.syteca.com/docs/administration/deployment/database-management\"}]},{\"@type\":[\"Article\",\"TechArticle\"],\"@id\":\"https://www.syteca.com/docs/administration/deployment/database-management#article\",\"headline\":\"Database Management\",\"name\":\"Database Management\",\"description\":\"Manage the Syteca database over its lifetime. Configure Archive and Cleanup operations, clean up sessions left behind by deleted Endpoints, and tune PostgreSQL autovacuuming to keep the database healthy under sustained write load.\",\"url\":\"https://www.syteca.com/docs/administration/deployment/database-management\",\"mainEntityOfPage\":{\"@id\":\"https://www.syteca.com/docs/administration/deployment/database-management#webpage\"},\"image\":\"https://www.syteca.com/og-default.png\",\"dateModified\":\"2026-10-07T08:31:26.677Z\",\"keywords\":\"syteca database management, archive cleanup parameters syteca, postgresql autovacuum syteca, clean up deleted endpoint sessions, server tray database parameters, syteca database maintenance\",\"publisher\":{\"@id\":\"https://www.syteca.com/#organization\"},\"isPartOf\":{\"@id\":\"https://www.syteca.com/docs#website\"}}]}\u003c/script>\u003cscript data-mint-head type=\"application/ld+json\">{\"@context\":\"https://schema.org\",\"@type\":\"WebSite\",\"name\":\"Syteca\",\"creator\":{\"@type\":\"Organization\",\"name\":\"Mintlify\",\"url\":\"https://mintlify.com\"}}\u003c/script>","siteName":"Syteca","nav":{"global":null,"tabs":[{"tab":"Get Started","pages":[{"title":"Get Started","href":"/get-started/what-is-syteca"}]},{"tab":"Session Monitoring","pages":[{"title":"Session Monitoring","href":"/session-monitoring/overview"}]},{"tab":"Privileged Access Management","pages":[{"title":"Privileged Access Management","href":"/pam/overview"}]},{"tab":"Endpoint Risk Control","pages":[{"title":"Endpoint Risk Control","href":"/risk/overview"}]},{"tab":"Administration","groups":[{"group":"Overview","pages":[{"title":"Administration","sidebarTitle":"Overview","description":"Deploy, scale, secure, and operate Syteca — installation, databases, users and permissions, Client configuration, licensing, Multi-Tenant mode, and system health.","icon":"settings","keywords":["syteca administration","syteca deployment","syteca system administration","manage syteca"],"href":"/administration/overview"}]},{"group":"Installation","pages":[{"title":"Syteca Architecture","sidebarTitle":"Architecture","description":"The Syteca deployment architecture — Application Server, Management Tool, Clients (Windows / macOS / Linux), Master Panel, and SDK — with the basic deployment scheme and large-scale-deployment patterns for HA, multi-tenant, and global organizations.","icon":"layers","keywords":["syteca architecture","syteca system components","syteca application server management tool clients","syteca master panel","syteca sdk","syteca deployment scheme","syteca jump server"],"href":"/administration/deployment/architecture"},{"title":"Comparison of Standard and High Availability Modes","sidebarTitle":"Standard vs HA Modes","description":"The operational differences between a single-Application-Server deployment and High Availability mode with multiple Application Servers in a failover cluster.","icon":"scale","keywords":["syteca standard mode vs high availability","syteca ha comparison","syteca deployment mode differences"],"href":"/administration/deployment/standard-vs-ha-modes"},{"title":"Installation Checklist","sidebarTitle":"Installation checklist","description":"The 10-step deployment sequence for installing Syteca on-premises: IIS setup on the Management Tool host, Application Server install, Management Tool install, serial key activation, multi-tenant setup, and Client installation for Windows, macOS, and Linux.","icon":"list-checks","keywords":["syteca installation checklist","syteca deployment steps","install syteca from scratch","syteca on-premises deployment","iis application server management tool"],"href":"/administration/deployment/installation-checklist"},{"title":"Install the Application Server","sidebarTitle":"Install Application Server","description":"Step-by-step installation of the Syteca Application Server on Windows — Setup wizard walkthrough, database selection (PostgreSQL / MS SQL Server), Master Certificate generation, Windows Firewall configuration, cloud deployment notes, and external/cloud-based AS setup.","icon":"server","keywords":["install syteca application server","syteca_server.exe","syteca setup wizard","ekran master certificate generation","windows firewall application server","syteca cloud install","external application server"],"href":"/administration/deployment/install-application-server"},{"title":"The Syteca Server Tray Application","sidebarTitle":"Server Tray Application","description":"Start, stop, and monitor the Application Server, and access the Database Parameters tool, from the Windows notification area.","icon":"server","keywords":["syteca server tray application","syteca server icon","start stop application server","dbsetuptoolui"],"href":"/administration/deployment/server-tray-application"},{"title":"Application Server Advanced Settings","sidebarTitle":"Advanced settings","description":"Advanced Syteca Application Server configuration — change the Client connection port, allow a non-admin user to start the EkranServer service, enable SWIFT username monitoring, and display a Warning and Consent banner on Management Tool login.","icon":"settings","keywords":["syteca ekranserver.settings.config","ekranserver service permissions","syteca custom port portsecure","swift username monitoring syteca","warning and consent banner syteca","syteca registry configuration"],"href":"/administration/deployment/server-advanced-settings"},{"title":"Management Tool Prerequisites","sidebarTitle":"Management Tool prerequisites","description":"Prepare a Windows computer to install the Syteca Management Tool — enable IIS, install .NET Framework, configure IIS roles, set up an SSL certificate, and bind HTTPS.","icon":"list-checks","keywords":["syteca management tool prerequisites","syteca iis configuration","syteca self-signed certificate","syteca https binding iis","syteca .net framework 4.8","syteca management tool installation checklist"],"href":"/administration/deployment/management-tool-prerequisites"},{"title":"Install the Management Tool","sidebarTitle":"Install Management Tool","description":"Install, configure for remote access, update, and uninstall the Syteca Management Tool on a Windows computer — the single procedure end-to-end.","icon":"download","keywords":["install syteca management tool","syteca management tool setup","update syteca management tool","uninstall syteca management tool","syteca firewall https inbound rule"],"href":"/administration/deployment/install-management-tool"},{"title":"Install the Syteca Tray Notifications Application","sidebarTitle":"Tray Notifications","description":"Install the standalone Syteca Tray Notifications application on a Windows endpoint. Note that this application is deprecated from Syteca 7.23 onward and is not included in current installation packages.","icon":"bell-off","keywords":["syteca tray notifications application","syteca traynotifications msi","syteca tray icon deprecated","syteca 7.23 deprecation"],"href":"/administration/deployment/tray-notifications"},{"title":"Update the Application Server","sidebarTitle":"Update Application Server","description":"Upgrade the Syteca Application Server to a newer version — Setup wizard's Update path, database update vs reinstall, .NET 8.0 prereqs, and SMBv2 update warning.","icon":"arrow-up","keywords":["update syteca application server","syteca_server.exe update","database update vs reinstall syteca","syteca .net 8.0 upgrade","smbv2 syteca update"],"href":"/administration/deployment/update-application-server"},{"title":"Update Syteca","sidebarTitle":"Update Syteca","description":"Best-practice procedure for updating an on-premises Syteca deployment is pre-update backup, Isolation Mode, .NET prereqs, data migration, and Endpoint update strategy.","icon":"arrow-up","keywords":["update syteca","syteca upgrade procedure","isolation mode update","data migration syteca",".net 8 syteca application server","syteca update best practice","syteca download zip"],"href":"/administration/deployment/update-syteca"},{"title":"Uninstall the Application Server","sidebarTitle":"Uninstall Application Server","description":"Uninstall the Syteca Application Server from a Windows host — pre-uninstall Client cleanup, the Setup wizard's Uninstall path, and the irreversible database deletion option.","icon":"trash-2","keywords":["uninstall syteca application server","remove application server windows","syteca_server.exe uninstall","syteca database deletion"],"href":"/administration/deployment/uninstall-application-server"},{"title":"Migrate the Application Server to Another Computer","sidebarTitle":"Migrate Application Server","description":"Move Syteca Application Server to a new computer while keeping the existing database, and update Client connection settings if the address changes.","icon":"server","keywords":["syteca migrate application server","move application server new computer","change application server ip address","endpoint exposure management migration","migrate endpoint exposure management secrets"],"href":"/administration/deployment/migrate-application-server"}]},{"group":"Scaling \u0026 High Availability","pages":[{"title":"High Availability, Load Balancing, and Disaster Recovery","sidebarTitle":"High Availability","description":"Scale Syteca beyond a single Application Server — High Availability mode using Microsoft Failover Clustering, automatic load balancing across nodes, and disaster recovery via Storage Replica.","icon":"network","keywords":["syteca high availability","syteca failover cluster","syteca load balancing","syteca disaster recovery","syteca storage replica","syteca multiple application servers","syteca scale"],"href":"/administration/deployment/high-availability"},{"title":"Configure Golden Image Mode","sidebarTitle":"Golden Image Mode","description":"Prepare a Syteca Client golden image and enable Golden Image mode on the Application Server so cloned virtual machines don't create duplicate Client entries.","icon":"copy","keywords":["syteca golden image","vdi golden image mode","clone virtual machine syteca client","avoid duplicate clients vdi","golden image mode application server"],"href":"/administration/deployment/golden-image-mode"},{"title":"VDI Monitoring","sidebarTitle":"VDI monitoring","description":"Monitor user activity across virtual desktop infrastructure — VMware Horizon, Microsoft Hyper-V, Citrix, Microsoft AVD / Windows 365, Amazon WorkSpaces, AppStream — using Syteca Clients on master images and floating endpoint licensing.","icon":"monitor","keywords":["syteca vdi monitoring","citrix session recording alternative","vmware horizon monitoring syteca","microsoft avd monitoring","amazon workspaces monitoring","vdi floating licensing","syteca master image vdi","non-persistent vdi monitoring"],"href":"/administration/deployment/vdi-monitoring"},{"title":"Install the Syteca Master Panel","sidebarTitle":"Master Panel","description":"Install the Syteca Master Panel, a component that aggregates Client sessions from every Application Server across your organization into a single interface for centralized session review.","icon":"monitor-check","keywords":["syteca master panel install","syteca master panel deployment","distributed session monitoring","multi-location syteca","session aggregation syteca","master panel windows server 2019 core","master panel msi installer"],"href":"/administration/deployment/master-panel"},{"title":"Install Additional Application Servers for Load Balancing","sidebarTitle":"Load balancing install","description":"Install additional Syteca Application Server instances alongside an existing deployment to distribute Client load across a cluster in High Availability mode.","icon":"server-cog","keywords":["syteca load balancing install","additional application servers","syteca cluster deployment","syteca ha additional servers","syteca master certificate import","distribute client load"],"href":"/administration/deployment/load-balancing-installation"},{"title":"Shared Storage High Availability","sidebarTitle":"Shared Storage HA","description":"Deploy shared storage in High Availability mode for Syteca screen captures using Microsoft Failover Clustering and Storage Replica. Recommended for medium and large deployments.","icon":"hard-drive","keywords":["syteca shared storage","syteca high availability storage","microsoft failover clustering syteca","storage replica stretch cluster","syteca screen capture storage","syteca screen capture ha"],"href":"/administration/deployment/shared-storage-ha"},{"title":"Deploy Syteca on Azure Cloud from Azure Marketplace","sidebarTitle":"Azure Marketplace","description":"Deploy Syteca on Azure Cloud using the Azure Marketplace listing. An end-to-end automated deployment that provisions Application Server, SQL database, and network configuration in a single wizard.","icon":"cloud","keywords":["syteca azure marketplace","syteca azure deployment","syteca cloud install","azure marketplace Syteca","deploy syteca azure","syteca ms sql postgresql azure sql"],"href":"/administration/deployment/azure-marketplace"}]},{"group":"Database","pages":[{"title":"Database Management","sidebarTitle":"Database management","description":"Manage the Syteca database over its lifetime. Configure Archive and Cleanup operations, clean up sessions left behind by deleted Endpoints, and tune PostgreSQL autovacuuming to keep the database healthy under sustained write load.","icon":"database","keywords":["syteca database management","archive cleanup parameters syteca","postgresql autovacuum syteca","clean up deleted endpoint sessions","server tray database parameters","syteca database maintenance"],"href":"/administration/deployment/database-management"},{"title":"MS SQL vs PostgreSQL for Syteca","sidebarTitle":"Compare Database Types","description":"Compare MS SQL Server and PostgreSQL for Syteca Application Server. Covers licensing, scalability, performance, and security to help you choose the right database.","icon":"database","keywords":["syteca database types","ms sql postgresql syteca","syteca database comparison","postgresql vs ms sql server","syteca on-premises database"],"href":"/administration/database/compare-databases"},{"title":"Edit the Database Parameters","sidebarTitle":"Database Parameters","description":"Change the Application Server's database type, authentication method, encryption, and binary data storage location after installation.","icon":"database","keywords":["syteca database parameters","dbsetuptoolui","syteca binary data storage location","syteca database authentication","sql server windows authentication syteca"],"href":"/administration/database/database-parameters"},{"title":"Creating Databases Manually","sidebarTitle":"Creating Databases Manually","description":"Pre-create the Syteca databases and a limited-privilege database user by hand, for MS SQL Server or PostgreSQL, before installing the Application Server.","icon":"database","keywords":["syteca create database manually","ms sql server ekranactivitydb","postgresql ekranactivitydb","limited privilege database user syteca","db_executor role"],"href":"/administration/database/creating-databases-manually"},{"title":"Set Up a Remote PostgreSQL Server","sidebarTitle":"Remote PostgreSQL Setup","description":"Install PostgreSQL on a remote server and configure it for Syteca Application Server. Covers postgresql.conf, pg_hba.conf, and opening port 5432 on both machines.","icon":"network","keywords":["syteca remote postgresql","postgresql remote access syteca","postgresql port 5432 syteca","pg_hba.conf syteca","syteca separate database server"],"href":"/administration/database/postgresql-remote"},{"title":"Moving the MS SQL Database","sidebarTitle":"Moving the MS SQL Database","description":"Relocate the MS SQL Server database to another drive on the same computer, or migrate it to a new computer entirely, including databases signed with a certificate.","icon":"database","keywords":["syteca move ms sql database","relocate sql server database","migrate database new computer","detach attach sql server database"],"href":"/administration/database/moving-ms-sql-database"},{"title":"Moving the PostgreSQL Database","sidebarTitle":"Moving the PostgreSQL Database","description":"Relocate the PostgreSQL database to another drive using tablespaces, or migrate the entire PGDATA directory to a new computer.","icon":"database","keywords":["syteca move postgresql database","postgresql tablespace","pgdata migration","relocate postgresql server"],"href":"/administration/database/moving-postgresql-database"},{"title":"MS SQL Database Maintenance: Index Rebuilding","sidebarTitle":"MS SQL Index Maintenance","description":"Check index fragmentation and set up a recurring SQL Server Maintenance Plan to rebuild or reorganize indexes for better database performance.","icon":"database","keywords":["syteca ms sql index maintenance","index fragmentation","sql server maintenance plan","rebuild index reorganize index"],"href":"/administration/database/ms-sql-index-maintenance"},{"title":"Using a gMSA or sMSA Account for the MS SQL Server Connection","sidebarTitle":"gMSA/sMSA Account","description":"Set up a Group or Standalone Managed Service Account for the connection between MS SQL Server and the Application Server, instead of a standard SQL login.","icon":"shield-check","keywords":["syteca gmsa account","smsa account ms sql server","managed service account syteca","kerberos syteca database connection"],"href":"/administration/database/gmsa-account"},{"title":"Configure Windows Authentication for Use with NTLM","sidebarTitle":"Windows Authentication \u0026 NTLM","description":"Prevent authentication errors when Windows Authentication uses the NTLM security protocol to connect to an MS SQL Server database with NTLM restrictions in place.","icon":"shield","keywords":["syteca ntlm authentication error","windows authentication use process credentials","ms sql server ntlm restrictions"],"href":"/administration/database/windows-authentication-ntlm"}]},{"group":"Users and Permissions","pages":[{"title":"Users and User Groups","sidebarTitle":"Users","description":"Syteca user management: three user types (internal, Active Directory, application account), four default user groups, custom groups, per-Endpoint permission scoping, two-factor authentication, and admin hardening.","icon":"users","keywords":["syteca user management","rbac pam platform","active directory user groups syteca","application account acb","user-to-user access","disable default admin","syteca 2fa"],"href":"/administration/users/users"},{"title":"Administrative Permissions","sidebarTitle":"Administrative permissions","description":"Reference for Syteca's seven administrative permissions — what each one grants, prerequisites, and the actions it unlocks on the Users page, Configuration, dashboards, and reports.","icon":"key","keywords":["syteca administrative permissions","management tool access","client installation and management","user management permission","viewing monitoring results","tenant management and system configuration","pam user access"],"href":"/administration/users/administrative-permissions"},{"title":"Endpoint Permissions","sidebarTitle":"Endpoint permissions","description":"Reference for Syteca's six per-Endpoint permissions — what each grants, OS scope, and a worked example showing how user-level and group-level permissions combine.","icon":"lock","keywords":["syteca endpoint permissions","viewing monitoring results endpoint","endpoint uninstallation permission","viewing text data","access to endpoint via secondary auth","endpoint configuration management"],"href":"/administration/users/client-permissions"}]},{"group":"Clients","pages":[{"title":"The Clients Page","sidebarTitle":"Overview","description":"The Syteca Clients page: a single grid showing every Windows, macOS, and Linux Client in the deployment — with status, version, license, Last Activity, Client Groups, and inheritance state.","icon":"server","keywords":["syteca clients page","viewing clients management tool","client list grid","client status online offline","client groups inherited settings","windows macos linux clients"],"href":"/administration/clients/overview"},{"title":"Windows Client Installation Prerequisites","sidebarTitle":"Windows install prerequisites","description":"Verify the prerequisites on a Windows target computer before remotely installing the Syteca Client. Covers the required Windows system services: Server and Remote Procedure Call (RPC).","icon":"monitor-check","keywords":["syteca windows client install prerequisites","windows client remote install","windows services rpc server","syteca windows client requirements"],"href":"/administration/clients/windows-install-prerequisites"},{"title":"Windows Client Installation Package Parameters","sidebarTitle":"Installation Package Parameters","description":"Every configuration parameter available in the Windows Client .ini installation package, for defining Client behavior before deployment.","icon":"file-cog","keywords":["syteca windows client ini parameters","syteca client installation package","syteca client ini file reference","sytecaclient.ini parameters"],"href":"/administration/clients/windows-installation-package-parameters"},{"title":"Windows Clients","sidebarTitle":"Windows Clients","description":"Syteca's Windows endpoint agent: record local, remote, and concurrent Windows sessions, capture screen and keystrokes, and stream events to the Application Server.","icon":"monitor","keywords":["syteca windows client","windows endpoint monitoring","windows session recording","rdp session monitoring","user activity monitoring windows","insider threat windows agent"],"href":"/administration/clients/windows"},{"title":"Install Windows Clients","sidebarTitle":"Install Windows Clients","description":"Install the Syteca Windows Client using any of seven supported methods: remote installation via the Management Tool, remote via PsExec, Group Policy MSI deployment, third-party deployment tools, local install with a custom installation package, local install without an INI file, or Amazon WorkSpaces bundle deployment.","icon":"monitor-down","keywords":["install syteca windows client","syteca client remote install","syteca client psexec","syteca client group policy msi","syteca client sccm","syteca client amazon workspaces","sytecaclient.exe install","windows client installation"],"href":"/administration/clients/install-windows"},{"title":"Deploy the Windows Client Using Microsoft Intune","sidebarTitle":"Intune Deployment","description":"Package the Syteca Windows Client as a Win32 app and deploy it remotely to devices enrolled in Microsoft Intune.","icon":"windows","keywords":["syteca intune deployment","win32 app package syteca client","intunewin syteca","azure ad joined client deployment"],"href":"/administration/clients/windows-intune-deployment"},{"title":"Editing the Windows Client Configuration","sidebarTitle":"Editing Client Configuration","description":"A tab-by-tab map of the Editing Client page for Windows Clients, linking each tab to the detailed parameter page that covers it.","icon":"sliders-horizontal","keywords":["syteca editing client configuration","windows client settings tabs","editing client page map","syteca client group inheritance"],"href":"/administration/clients/windows-client-configuration"},{"title":"macOS Clients","sidebarTitle":"macOS Clients","description":"Syteca's macOS endpoint agent: record user sessions on Macs with multiple-display capture, manage native macOS permissions, and stream events to the Application Server.","icon":"apple","keywords":["syteca macos client","macos endpoint monitoring","macos user activity monitoring","mac session recording","accessibility screen recording permission","insider threat macos"],"href":"/administration/clients/macos"},{"title":"macOS Hidden Client","sidebarTitle":"macOS Hidden Client","description":"Stealth-mode macOS Client for monitoring without visible indicators - alternative to the standard macOS Client when users shouldn't know monitoring is active.","icon":"eye-off","keywords":["syteca macos hidden client","stealth mode endpoint monitoring","covert pam monitoring macos","hidden user activity monitoring","syteca system analysis","macos monitoring without notifications"],"href":"/administration/clients/macos-hidden"},{"title":"Install macOS Clients","sidebarTitle":"Install macOS Clients","description":"Install the Syteca macOS Client locally from the command line using the SytecaMacOSClientuniversal.tar.gz installation package. Covers standard and hidden Client variants, Multi-Tenant tenant keys, and the Accessibility and Screen Recording permission grants required for correct Client operation.","icon":"apple","keywords":["install syteca macos client","sytecamacosclientuniversal.tar.gz","macos hidden client install","syteca session client permissions","system analysis app macos","syteca macos install.sh"],"href":"/administration/clients/install-macos"},{"title":"Linux Clients","sidebarTitle":"Linux Clients","description":"How Syteca Linux Clients monitor SSH and terminal sessions, optionally X Window System GUI sessions, and how to fix Rescue mode and post-update status.","icon":"terminal","keywords":["syteca linux client","ssh session monitoring","linux terminal monitoring","x window system gui monitoring","linux rescue mode"],"href":"/administration/clients/linux"},{"title":"Install Linux Clients","sidebarTitle":"Install Linux Clients","description":"Install the Syteca Linux Client locally from the command line using the SytecaLinuxClient.tar.gz installation package. Supports default monitoring parameters, custom monitoring via an INI file, and SELinux-enabled endpoints with automatic variant selection.","icon":"terminal","keywords":["install syteca linux client","sytecaLinuxClient.tar.gz","install.sh script syteca","selinux client install","linux client x11 monitoring","linux client multi-tenant install"],"href":"/administration/clients/install-linux"},{"title":"Client Groups","sidebarTitle":"Client groups","description":"Manage Syteca Clients in bulk using Client groups — bulk-assign user permissions, inherit configuration settings, clone, and manage memberships from either the Client or the Client group side.","icon":"server-cog","keywords":["syteca client groups","client group settings inheritance","bulk manage clients","client group permissions","manage group settings bulk action","all clients group"],"href":"/administration/clients/client-groups"},{"title":"Update Clients","sidebarTitle":"Update Clients","description":"Update Syteca Windows, macOS, and Linux Clients automatically when the Application Server upgrades, or manually from the Management Tool with Bulk Action.","icon":"refresh-cw","keywords":["update syteca client","update client automatically","update client manually","bulk action update selected clients","client update procedure"],"href":"/administration/clients/update-clients"},{"title":"Uninstall Clients","sidebarTitle":"Uninstall Clients","description":"Uninstall Syteca Clients remotely from the Management Tool or locally on the endpoint — for Windows, macOS, and Linux. Includes the shared Uninstallation key, single and bulk remote uninstall, and per-OS local uninstall commands.","icon":"trash-2","keywords":["uninstall syteca client","client uninstallation key","remote uninstall pam client","uninstallclient.exe","syteca uninstall.sh macos","syteca uninstall.sh linux","uninstall syteca rpm"],"href":"/administration/clients/uninstall"},{"title":"Delete Clients","sidebarTitle":"Delete Clients","description":"Permanently remove an offline or uninstalled Client and all its recorded sessions from the database, individually or in bulk.","icon":"trash-2","keywords":["syteca delete client","remove client permanently","delete client bulk action","syteca client database cleanup"],"href":"/administration/clients/delete-clients"},{"title":"Offline Cache Size Parameter","sidebarTitle":"Offline Cache Size","description":"Configure how much local disk space a Syteca Client can use to cache monitoring data while disconnected from the Application Server.","icon":"database","keywords":["syteca offline cache size","client offline mode","syteca disconnected client data","offlinepool.dat linux","client local cache disk space"],"href":"/administration/clients/parameters/offline-cache-size"}]},{"group":"Access","pages":[{"title":"Endpoint Access Control","sidebarTitle":"Endpoint access control","description":"Require administrator approval before users log in to Windows and Linux Client computers in Syteca - always, or only outside defined work hours.","icon":"shield-check","keywords":["syteca endpoint access control","administrator approval on login","restrict client login","access restrictions","approval on login work hours"],"href":"/administration/access/endpoint-access-control"},{"title":"Smart Card Access","sidebarTitle":"Smart card access","description":"Syteca smart card authentication: enforce PIV / CAC / domain-certificate sign-in to the Management Tool, so only users holding the physical card can administer the platform.","icon":"id-card","keywords":["syteca smart card authentication","syteca piv cac","syteca client certificate mapping","smart card pam management","fips 201 pam","hardware token authentication"],"href":"/administration/access/smart-card-access"},{"title":"Two-Factor Authentication","sidebarTitle":"Two-factor authentication","description":"Require a TOTP second factor for logging in to Syteca Windows and Linux Client computers, using Google or Microsoft Authenticator. Includes Mass 2FA setup.","icon":"smartphone","keywords":["syteca two-factor authentication","2fa totp client login","google authenticator","mass 2fa","qr code login"],"href":"/administration/access/two-factor-authentication"}]},{"group":"Management Tool Settings","pages":[{"title":"System Settings","sidebarTitle":"System Settings","description":"Configure Multi-Tenant mode, session timeouts, concurrent login rules, access request expiration, and logging levels on the System Settings tab.","icon":"settings","keywords":["syteca system settings","syteca session timeout","concurrent sessions management tool","multi-tenant mode toggle","windows event log integration"],"href":"/administration/configuration/system-settings"},{"title":"Email Sending Settings","sidebarTitle":"Email Sending Settings","description":"Configure the SMTP server, credentials, and recipient rules Syteca uses to send alert, USB monitoring, report, and health monitoring email notifications.","icon":"mail","keywords":["syteca email sending settings","smtp configuration syteca","syteca email notifications","health monitoring notifications email"],"href":"/administration/configuration/email-sending-settings"},{"title":"Customization Settings","sidebarTitle":"Customization Settings","description":"Customize the Client notification logo, recording-in-progress icon, report branding, email subjects, blocked-user message, and 2FA login instructions.","icon":"palette","keywords":["syteca customization settings","custom logo syteca client","custom email subject syteca","syteca report branding","blocked user custom message"],"href":"/administration/configuration/customization-settings"},{"title":"Date \u0026 Time Format Settings","sidebarTitle":"Date \u0026 Time Format","description":"Set the date and time format used in the Management Tool and by Application Server features like Forensic Export, alert emails, and reports.","icon":"calendar-clock","keywords":["syteca date time format","management tool date format","application server date format","syteca timestamp format"],"href":"/administration/configuration/date-time-format"},{"title":"Export Storage Settings","sidebarTitle":"Export Storage Settings","description":"Set default storage locations for Forensic Export results and generated reports, particularly for High Availability deployments.","icon":"folder","keywords":["syteca export storage settings","forensic export storage location","reports storage location syteca","high availability export storage"],"href":"/administration/configuration/export-storage-settings"},{"title":"Database Management Settings","sidebarTitle":"Database Management Settings","description":"View database connection details and access Archive \u0026 Cleanup, Test Database Connection, Shrink Transaction Log, and Update Statistics from the Configuration page.","icon":"database","keywords":["syteca database management settings","test database connection","update statistics syteca","database management tab"],"href":"/administration/configuration/database-management-settings"},{"title":"Account Discovery Settings","sidebarTitle":"Account Discovery Settings","description":"Configure the reconciliation account, dependency failure notifications, and the WMI, PowerShell, and Linux SSH scanners used by Account Discovery — all from the Management Tool.","icon":"settings","keywords":["syteca account discovery settings","syteca reconciliation account","syteca wmi scanner settings","syteca powershell scanner settings","syteca linux ssh scanner settings"],"href":"/administration/configuration/account-discovery-settings"}]},{"group":"Client Parameters","pages":[{"title":"Endpoint Description","sidebarTitle":"Endpoint description","description":"Set a free-form description on a Syteca Endpoint to make it easier to find specific Endpointss when filtering by description as well as by name.","icon":"tag","keywords":["syteca endpoint description","endpoint comment field syteca","endpoint filtering by description"],"href":"/administration/clients/parameters/client-description"},{"title":"Update Client Automatically","sidebarTitle":"Update client automatically","description":"Enable Syteca Clients to update themselves automatically whenever they connect to an Application Server running a newer Syteca version - versus requiring manual bulk updates from the Management Tool.","icon":"refresh-ccw","keywords":["syteca update client automatically","automatic client updates","syteca client mode","syteca client upgrade"],"href":"/administration/clients/parameters/update-client-automatically"},{"title":"Disconnected Endpoint Detection","sidebarTitle":"Disconnected endpoint detection","description":"Receive email notifications when a Syteca Endpoint has been offline for longer than a specified period — for catching agent uninstalls, network outages, and disabled monitoring early.","icon":"bell-off","keywords":["syteca disconnected endpoint","syteca offline endpoint notification","syteca endpoint offline email alert","syteca monitoring gap detection"],"href":"/administration/clients/parameters/disconnected-client-detection"},{"title":"Auto-Cleanup Parameters","sidebarTitle":"Auto-cleanup","description":"Configure scheduled or one-time cleanup of Endpoint-collected monitoring data — delete from the database, or archive to secure storage first and then delete. Apply per Endpoint or per Endpoint group.","icon":"trash","keywords":["syteca auto cleanup","syteca data retention","syteca archive and cleanup","syteca scheduled cleanup","syteca database cleanup parameters"],"href":"/administration/clients/parameters/auto-cleanup"},{"title":"Protected Mode","sidebarTitle":"Protected mode","description":"Run the Syteca Windows Client in Protected mode - kernel-driver-enforced anti-tamper protection preventing users from editing Client data, settings, log files, or binaries even with local administrator rights.","icon":"shield-check","keywords":["syteca protected mode","syteca anti-tamper","syteca driver-level protection","client tamper protection","kernel driver tamper protection","syteca insider threat hardening"],"href":"/administration/clients/parameters/protected-mode"},{"title":"Syteca PAM Connection Manager (Jump Server Mode)","sidebarTitle":"PAM Connection Manager","description":"Enable the Syteca Desktop Connection Manager on a Windows Client computer - turns the Client into a jump server for credential-less access to remote accounts using Syteca account secrets.","icon":"arrow-right-left","keywords":["syteca pam connection manager","syteca jump server","syteca desktop connection manager","syteca remote access credentials","syteca account secrets remote access"],"href":"/administration/clients/parameters/pam-connection-manager"},{"title":"Windows Event Log Integration","sidebarTitle":"Windows Event Log integration","description":"Forward Syteca Windows Client log messages - errors, warnings, informational events - to the Windows Event Log for centralized log collection by SIEM agents or log management tools.","icon":"scroll-text","keywords":["syteca windows event log","syteca event log integration","syteca log forwarding windows","syteca siem log collection"],"href":"/administration/clients/parameters/windows-event-log-integration"},{"title":"Custom Path for the Client Installation Folder","sidebarTitle":"Custom installation path","description":"Define a custom installation folder for the Syteca Windows Client - useful for endpoints with non-default Program Files paths, deployment via GPO with standardized install locations, or compliance scenarios requiring agents on specific volumes.","icon":"folder-cog","keywords":["syteca custom install path","syteca client installation folder","syteca install location","syteca environment variables install path"],"href":"/administration/clients/parameters/custom-installation-path"},{"title":"One-Time Passwords","sidebarTitle":"One-Time Passwords","description":"Require a Windows Client login to be approved with a one-time password, either through an Approver or sent automatically to trusted users.","icon":"key-round","keywords":["syteca one-time password","otp client login","access request approval syteca","two-factor secondary authentication windows"],"href":"/administration/clients/parameters/one-time-passwords"},{"title":"Secondary User Authentication","sidebarTitle":"Secondary User Authentication","description":"Identify individual users on shared Windows or Linux accounts by requiring secondary login credentials before Syteca starts recording their activity.","icon":"user-check","keywords":["syteca secondary user authentication","shared account monitoring","identify user shared login","secondary authentication windows linux"],"href":"/administration/clients/parameters/secondary-user-authentication"},{"title":"Display an Additional Message on Login","sidebarTitle":"Additional Login Message","description":"Show users a custom message, consent prompt, or comment/ticket-number requirement before they can access a Windows or Linux Client.","icon":"message-square-warning","keywords":["syteca additional login message","user consent monitoring notice","login banner syteca","require comment ticket number login"],"href":"/administration/clients/parameters/additional-login-message"},{"title":"Linux Client Parameters","sidebarTitle":"Linux Client Parameters","description":"Reduce database space used by Linux Client sessions by limiting or skipping command output and function calls, and set a Linux Client's description.","icon":"terminal","keywords":["syteca linux client parameters","command output limiting","command output skipping","function call skipping","linux client description"],"href":"/administration/clients/parameters/linux-client-parameters"}]},{"group":"Licensing","pages":[{"title":"Licensing Overview","sidebarTitle":"Overview","description":"Understand Syteca product license serial keys, the types available, what they contain, and the Update \u0026 Support period that governs new versions and support.","icon":"key","keywords":["syteca licensing","syteca serial key","permanent subscription trial saas","pam seat license","endpoint license","update support period"],"href":"/administration/licensing/overview"},{"title":"Activate or Update the Serial Key","sidebarTitle":"Activate serial key","description":"Activate a new Syteca serial key or update an existing one, from the Management Tool. Two procedures depending on whether the Application Server has Internet access: online activation directly from the Management Tool, or offline activation via the Syteca website.","icon":"key-round","keywords":["syteca serial key activation","syteca license activation","syteca online activation","syteca offline activation","syteca serial key update","activate product","update key state"],"href":"/administration/licensing/activate-serial-key"},{"title":"Manage the Serial Key","sidebarTitle":"Manage serial key","description":"View, activate, update, deactivate, and proxy-configure the Syteca product license serial key on the Serial Key Management tab in the Management Tool.","icon":"key-round","keywords":["activate syteca serial key","syteca serial key offline","deactivate serial key","proxy server serial key activation","update serial key"],"href":"/administration/licensing/manage-serial-key"},{"title":"Assign PAM Seat Licenses","sidebarTitle":"Assign PAM seat licenses","description":"Assign and unassign Syteca PAM seat licenses (Password Management seat licenses) to users individually or by user group, so they can use PAM features.","icon":"users","keywords":["syteca pam seat license","password management seat license","assign pam user","unassign pam license","pam user group"],"href":"/administration/licensing/assign-pam-seat-licenses"},{"title":"Assign Endpoint Licenses to Clients","sidebarTitle":"Assign endpoint licenses","description":"Assign Syteca endpoint licenses to Clients manually or automatically (floating licensing), and in Multi-Tenant mode, grant licenses to tenants.","icon":"laptop","keywords":["syteca endpoint license","assign client license","floating endpoint license","automatic license reassignment","multi-tenant licenses granted"],"href":"/administration/licensing/assign-endpoint-licenses"},{"title":"Automatic License Assignment","sidebarTitle":"Automatic license assignment","description":"Assign endpoint licenses with ordered rules that match endpoints, groups, hostname masks, subnets, or IP ranges, with reserved pools for Golden image deployments.","icon":"list-ordered","keywords":["syteca automatic license assignment","license assignment rules","golden image reserved licenses","default for servers workstations","backup license type","endpoint license rules"],"href":"/administration/licensing/automatic-license-assignment"}]},{"group":"Multi-Tenant","pages":[{"title":"Multi-Tenant Mode","sidebarTitle":"Overview","description":"Syteca Multi-Tenant mode: run one Syteca deployment as multiple isolated tenants, each with its own admin, users, Clients, licenses, alerts, and reports.","icon":"users-round","keywords":["syteca multi-tenant","multi-tenant pam","tenant isolation","msp pam platform","tenant management","tenant admin","shared deployment isolation"],"href":"/administration/multi-tenant/overview"},{"title":"Manage Tenants","sidebarTitle":"Manage tenants","description":"View, add, edit, change licenses, change the domain admin, delete, and switch between tenants in Syteca Multi-Tenant mode — all from the Tenants page.","icon":"list-tree","keywords":["syteca manage tenants","add tenant","delete tenant","switch tenant","tenant license grant","change tenant admin","edit tenant"],"href":"/administration/multi-tenant/manage-tenants"},{"title":"Cross-Tenant Access","sidebarTitle":"Cross-tenant access","description":"How a Syteca tenant admin grants the technician (admin of the built-in default tenant) full access to their tenant account — opt-in and revocable.","icon":"user-plus","keywords":["syteca grant technician access","cross-tenant access","tenant admin grant access","switch to tenant account","tenant isolation override"],"href":"/administration/multi-tenant/cross-tenant-access"}]},{"group":"Dashboards","pages":[{"title":"Application Server Resource Monitoring","sidebarTitle":"AS resource monitoring","description":"Monitor Syteca Application Server CPU, memory, database write queue, and storage usage in real time from the System State page. Four live dashboards refresh every 5 seconds and let administrators spot resource pressure before it becomes an outage.","icon":"chart-line","keywords":["syteca application server monitoring","syteca system state","as cpu memory monitoring","database queue size syteca","syteca storage usage dashboard","application server resources syteca"],"href":"/administration/dashboards/application-server-monitoring"},{"title":"System Health Dashboards","sidebarTitle":"System health dashboards","description":"Monitor Syteca system state in the Management Tool - Storage Usage, CPU, Memory, Database State, and Endpoint status - on customizable, real-time dashboards.","icon":"activity","keywords":["syteca system health dashboards","storage usage dashboard","cpu usage","memory usage","database state","endpoints online offline"],"href":"/administration/dashboards/system-health-dashboards"},{"title":"System Error and Warning Reference","sidebarTitle":"Error Reference","description":"Causes and recommended actions for the specific error and warning messages that appear in the System Health Transaction Log.","icon":"search-alert","keywords":["syteca system health transaction log errors","syteca error messages reference","database connection lost error","postgresql too many clients error"],"href":"/administration/dashboards/system-error-reference"}]},{"group":"Audit Log","pages":[{"title":"Audit Log","sidebarTitle":"Audit log","description":"View, filter, sort, and protect the Syteca Audit log — a tamper-evident record of every administrator action performed in the Management Tool, grouped by category.","icon":"scroll-text","keywords":["syteca audit log","management tool log","administrator action log","audit log filter sort","tamper-evident log"],"href":"/administration/audit-log"}]},{"group":"Security","pages":[{"title":"Syteca Encryption","sidebarTitle":"Encryption","description":"Cryptographic architecture of Syteca — RSA-2048 Master Certificate, AES-256 for monitoring data, FIPS 140-2 certified implementations, Diffie-Hellman key exchange, and SHA-256 password hashing.","icon":"lock","keywords":["syteca encryption","aes-256 syteca","rsa-2048 master certificate","fips 140-2 syteca","syteca cryptography","ekran master certificate","syteca data protection certificate"],"href":"/administration/security/encryption"},{"title":"Master Certificate Management","sidebarTitle":"Master Certificate","description":"Manage the Syteca Master Certificate (EkranMasterCertificate) — back up, delete, import, reissue, and optionally migrate from RSA-2048 to RSA-4096 encryption. Essential for Application Server recovery, migration, and High Availability setup.","icon":"key","keywords":["syteca master certificate","ekranmastercertificate","back up master certificate","import master certificate","reissue master certificate","rsa-4096 migration syteca","certificate export wizard syteca"],"href":"/administration/security/master-certificate"},{"title":"Third-Party Software Used by Syteca","sidebarTitle":"Third-Party Software","description":"Open-source components incorporated into Syteca that carry copyleft license obligations, including source-code availability under LGPLv3.","icon":"package","keywords":["syteca open source components","smblibrary lgplv3","syteca third-party license disclosure","syteca copyleft compliance"],"href":"/administration/security/third-party-notices"},{"title":"Add IIS Request Filtering Exceptions for Syteca","sidebarTitle":"IIS Request Filtering","description":"Configure Internet Information Services (IIS) Request Filtering to allow the file extensions Syteca uses. Required when IIS Request Filtering is enabled with default deny rules, which is common in hardened Windows Server environments.","icon":"shield-check","keywords":["syteca iis request filtering","iis exceptions syteca","allow file name extension iis","syteca hardened iis","iis security policy syteca"],"href":"/administration/security/iis-request-filtering"},{"title":"Exclude Syteca Processes from Antivirus Software","sidebarTitle":"Antivirus Exclusions","description":"File paths, executables, and services to whitelist in antivirus software so it doesn't block Syteca or its underlying database and web server.","icon":"shield-check","keywords":["syteca antivirus exclusions","whitelist syteca client","ekranclient antivirus blocked","sql server antivirus exclusions"],"href":"/administration/security/antivirus-exclusions"},{"title":"Keystroke Logging and Password Masking","sidebarTitle":"Keystroke \u0026 Password Masking","description":"How Syteca protects logged keystrokes from casual viewing and database-level exposure, and how it automatically masks passwords before they're sent.","icon":"eye-off","keywords":["syteca keystroke logging security","syteca password masking","keystroke encryption master certificate","regex password detection"],"href":"/administration/security/keystroke-password-masking"},{"title":"Move the Master Certificate to Thales HSM","sidebarTitle":"Thales HSM Integration","description":"Store the Syteca master certificate on a Thales HSM external storage device using SafeNet KeySecure and SafeNet ProtectApp for extra security.","icon":"shield-check","keywords":["syteca thales hsm","safenet keysecure","safenet protectapp","hardware security module master certificate"],"href":"/administration/integrations/thales-hsm"}]}]},{"tab":"API \u0026 Integrations","pages":[{"title":"API \u0026 Integrations","href":"/api/overview"}]},{"tab":"Release Notes","pages":[{"title":"Release Notes","href":"/release-notes/overview"}]},{"tab":"Resources","pages":[{"title":"Resources","href":"/resources/overview"}]}]},"title":"Database Management - Syteca","buildId":"dpl_F84hxsfpgp2X9JGm5b3ifvEiN8uw","deploymentId":"dpl_F84hxsfpgp2X9JGm5b3ifvEiN8uw","dynamics":["07c022d89b","a74be98ba7","a9bb46feb3"],"chunks":["Frame-C1eP6wER.js","DynamicMarkdown--ExrtdhQ.js","zoom-image-lightbox-CLgQo3H8.js","PlusIcon-KwEVY7QO.js","lightbox-handle-r17bVUz3.js","Markdown-CsvKjfol.js","dist-8bf4sF95.js","lib-B6V4jynN.js","lib-vtHBCq3V.js","clsx-2xgAdfzU.js","html-void-elements-mCSPHezU.js","katex-Cnv50rb0.js","marked.esm-BKo0Hl1x.js","AssistantPageLink-D3YdZ7b4.js"]}