Using the Complete Nuke Cleanup Utility

24 Using the Complete Nuke Cleanup Utility

Oracle Identity Governance provides a new data cleanup utility to purge huge data and reclaim large storage space with the same operation in the non-production environment.

Oracle Identity Governance has been providing real-time and continuous data purge solution to meet the standards of performance and scalability by maintaining the data generated for the life cycle management of various entities. However, there is a need for a complete data cleanup utility to purge huge data for reconciliation, certification, legacy audit, orchestration, and provisioning task entities, and also reclaim huge storage space with the same operation in the non-production environment.

This chapter contains the following topics:

24.1 About Complete Nuke Cleanup Utility

The Complete Data Cleanup Utility helps to purge huge volume data sets in non-production environments.

Using the Complete Data Cleanup Utility, you can purge data of Oracle Identity Governance entities, such as reconciliation, provisioning task, certification, audit legacy, and orchestration in the non-production environment.

Oracle recommends using the Complete Data Cleanup Utility when you have to completely remove the data of all or any of the entities, such as reconciliation, provisioning task, certification, audit legacy, and orchestration.

Some of the key features of the Complete Data Cleanup Utility are:

The Complete Data Cleanup Utility supports data purge based on Oracle Identity Governance entity type.
The Truncate Table approach is used to purge data. Also, storage space for the purged data set is automatically reclaimed.
You can perform the complete nuke cleanup operation by using the PL/SQL block.
The logging of the Complete Data Cleanup Utility is disabled in Oracle Identity Governance by default.
The Complete Data Cleanup Utility uses the existing PL/SQL diagnostic logging and debugging framework to track the progress of the cleanup operation.
The summary and detailed information for the complete nuke cleanup operation is captured in two separate diagnostic logging tables, DIAG_LOG and DIAG_LOG_DTLS.
If an error is encountered during the execution of complete nuke cleanup, then rectify the error and retry. If the environment is required immediately, then restore the schema from the backup.

24.2 Prerequisites for Running the Complete Nuke Cleanup Utility

The following prerequisites must be met before running the Complete Nuke Cleanup Utility operation:

Before running the complete nuke cleanup operation, create a backup of the tables to be purged.
Ensure that you do not have a business use for the data identified for purging in the mainstream Oracle Identity Governance operations.
Make sure to collect latest statistics for Oracle Identity Governance database schema.
Ensure that Oracle Identity Governance server is down during the purge operation.
Make sure to perform the complete nuke cleanup operation only in the non-production environment.
Enable diagnostic logging during the complete nuke cleanup operation by setting the diagnostic level to FINEST as the value of the OIM.DBDiagnosticLevelDataTrunc system property. See Default System Properties in Oracle Identity Governance for information about this system property.

After the diagnostic data is collected, reset the values of the system properties from FINEST to the default value of NONE. See Editing System Properties for information about modifying the values of system properties.

24.3 Running the Complete Nuke Cleanup Utility

To run the Complete Nuke Cleanup Utility:

Note:

Before running the complete nuke cleanup, start the diagnostic logging.

Login to Oracle Identity Governance Database schema by using SQLPLUS shell, SQL Developer, or any other interface tool.
To run the complete nuke cleanup for reconciliation entities, execute the below code block:
```
declare
    v_err_code number;
    v_err_msg  varchar2(4000);
begin
    OIM_PKG_DATA_TRUNCATE.ReconDataTruncate(v_err_code,v_err_msg);
    dbms_output.put_line(v_err_code);
    dbms_output.put_line(v_err_msg);
end;
```
To run the cleanup for other entities, replace OIM_PKG_DATA_TRUNCATE.ReconDataTruncate with:
- OIM_PKG_DATA_TRUNCATE.OrchestrationDataTruncate for orchestration
- OIM_PKG_DATA_TRUNCATE.ProvDataTruncate for provisioning
- OIM_PKG_DATA_TRUNCATE.ReconDataTruncate for reconciliation
- OIM_PKG_DATA_TRUNCATE.CertDataTruncate for certification
- OIM_PKG_DATA_TRUNCATE.AudDataTruncate for legacy audit

Check whether the objects related to the purged entity are valid after successful completion of the complete nuke cleanup operation. If the objects are invalid, then check the log and contact Oracle Support with the logs.