The "QueryFlags" column in the CA Data Protection 15.2 "Wgn3EventParticipant" table is used to indicate if the event has associated trigger and/or issue record. If there are large numbers of participants for each event, delays or timeouts can can occur due to the additional time taken to update the "QueryFlags" in the "Wgn3EventParticipant" table. It is possible to switch off updates to the "QueryFlags" data (execution syntax below) to improve the performance of iConsole bulk audit operations.
EXEC wgn_QueryFlags_SP_Switch @noQF = 0 -- Update Queryflags (DEFAULT)
EXEC wgn_QueryFlags_SP_Switch @noQF = 1 -- Don't update Queryflags
Caution: The @noQF = 1 option will disable the queryflags optimizations and these can only be restored by re-running wgn_queryflags_migrate. Switching @noQF = 1 will have significant search performance impact on customers using this optimization running the management group self exclude security model searching for unreviewed events.
An issue has been identified in CA Data Protection 15.2 where enabling the 'queryflags' feature by executing the 'wgn_QueryFlags_SP_Switch' stored procedure fails to execute as the 'wgn_update_event_QF_Def' procedure is missing in the database.