UMC: No self-protection to get overloaded by the user audit logs aka user statistics

There are many incidents related to ARIS Cloud and On-Premise customers where the feature "Audit Logs" (aka "User Statistics") creates issues during backup and restore issues. There are also assumptions that a high volume of this statistical data could influence the stability of the environment. Currently, the product allows us to enable this feature without a warning. Once it is enabled, the product collects the data correspondingly without a limitation condition which leads to the mentioned issues.

The incident behind the iTrac AGG-34203 gave me cause now to request a product improvement or feature - at the best - to limit the automated collected data by rotation mechanisms or by defining a total maximum - configurable from the ARIS Administration UI. Also, a Purge has to get possible using the UI (a command-line tool already exists).

In the short term, means as soon as possible the product should get a warning mechanism implemented when the corresponding option gets enabled, and also recommendations should be shown (e.g. administrators have to purge the data periodically.

The current known but limited workaround is to increase the property of ElasticSearch (result_window) to gain a backup of data although the volume exceeds the default defined limits. But we got informed that this value should not reach a specific limit (details in the iTrac).

Furthermore, there is no official product documentation known about the risks and workaround of this feature.

Another Case:

AGA-30094