Restore the event databases to recover lost or damaged audit data, according to your established disaster recovery strategies. For best results, use the following guidelines:
- Perform a full restore, including the transaction logs
- Schedule the restore during off-hours, or times when you expect the least audit activity
- Restore all event databases during the same restore procedure
- Restore the SQLcompliance database during the same restore procedure to ensure audit data integrity remains intact
To restore the event databases:
- Use SQL Server Enterprise Manager or Management Studio to close any open connections to the SQLcompliance database.
- Use SQL Server Enterprise Manager or Management Studio to take the SQLcompliance database offline. If you cannot take the SQLcompliance database offline, stop the Collection Service.
- Use a tool such as IDERA SQL Safe to restore the SQLcompliance database using the appropriate backup file, including transaction logs.
- Use a tool such as IDERA SQL Safe to restore each event database using the appropriate backup file, including the transaction logs. Each registered SQL Server instance has a corresponding event database. For more information, see Product components and architecture.
- Use SQL Server Enterprise Manager or Management Studio to bring the SQLcompliance database online.