Popular Tags

  • Improving the calculation of tablespace sizes during ArcSight ESM installation, particularly on ArcSight ESM Appliances, to prevent storage-related issues

    This enhancement request outlines the need for improving the calculation of tablespace sizes during ArcSight ESM installation, particularly on ArcSight ESM Appliances, to prevent storage-related issues and ensure optimal system performance. Summary…

  • /Opt is used by 99%

    Dears, I have my /opt for ESM is used by 99%, we couldn't increase the size of /opt, and couldn't decrease the retention period to lower one. Are there any files that could be deleted to free some space to avoid ESM down!!!

  • ArcSight ESM online storage extend to 24T

    Hi Everyone, Since Logger online storage have been extend to support 24T, we will like to ask this online storage limit also apply to ESM. Regards Leon Chiu

  • Logger online storage size expedition beyond 16TB

    Though Logger support logger pool architecture to use multiple logger instances create bigger online storage space, but it will result data management issue, like one of logger pool instances crash will result data lost because of logger archiving setting…

  • To load or unload an Event Archive in Appliance logger

    Hello, We need to restore archives in appliances loggers version is 7.1.1 but, the load and unload event archive selection is not listed in the Storage event Archive menu only Add and remove, index and Cancel Index are available. I found few replies…

  • Adding disk capacity to GEN 9 ESM applience

    Dear Masters! I have a question regarding adding disk/ capacity or workarounds for an ESM Appliance on GEN 9 series? If someone has done it or equivalent before? Right now, the Appliance has 2TB disk/capacity, which has been fully consumed, and we…

  • Clean up unnecessary event storage file from /opt/arcsight/logger/data/logger

    Once event storm is occurred, online data storage ( event storage) had huge number of "/opt/arcsight/logger/data/logger/Arcsight_Data_XXX" file is remained as FREE state. Once EPS is stabled, those data file is not reduced and occupy storage space without…

  • ESM archive?

    Hello, I keep enduring the same issue every 6 months. My esm archive fills up and I receive email alerts that my /opt/arcsight/logger/data/archives directory has filled up. However, when viewing the Storage tab in ESM command center, my default storage…

  • Did i can trust to 1/10 compression for planning capacity for ArcSight ESM?

    Hi All I am planning the capacity of Storage allocation to ArcSight ESM. in this case i have a limitation for EPS and LogVolume/Day in ESM license. as you know there are a huge feature in smart connector imply to 1/10 compression. did i can trust to the…

  • ESM Suit Installation ERROR !

    Hi I installed a RedHat Server 6.4 x64 on a esx Machine with this especs: memory:36 G HDD:160 G CPU: 8 Core also all progresses of ESM_InstallGuide.6.5cSP1.pdf passed for installation of ESMSuit 6.5cSP1 - enableing hostname FQDN Resolvation - disabled…

  • Changing ESM 6.9's data allocation

    Hello. We recently installed a new ESM server in a rush as the other one crashed on us. However the following values were not setup correctly during the initial installation : SYSTEM STORAGE EVENT STORAGE ONLINE EVENT STORAGE Our main (and only problem…

  • Regarding Software Logger 6.2 Storage or disk usage

    Hi, I am trying to understand the online/offline archives and need some clarifications. I have two mount points one for storing online data files and the other for storing the data archives. From Logger WebUI I can see less than 60% of storage volume…

  • arcsight logger retention - File deletion

    What We did created some space in Logger. Previous we have 365 days of online log retention. we have change to 180 days so in logger Dashboard i am able see that logger create free space but when i am checking from CLI(command line) it showing me the…

  • Logs protected within ESM Manager CORRe

    Hi all, For an audit happening at my workplace I need to find something documented that describes how logs are protected from being tampered with, within CORRe storage. Can someone point me to something that may exist? My understanding is that they are…

  • How to calculate storage size consumption for ESM and Logger?

    Hi All, My aim is to increase the storage of both ESM and Logger since we are aiming for a longer retention time. For this I need to evaluate the current space utilized by day/time. Since my logger has unlimited license, there is no information available…

  • Logger SW losing logs after reboot

    Hi, I've just installed a logger SW version 6.0 and a windowsfg connector. I'm experiencing this strange situation: after a logger reboot, the logs collected (both internal and from the connector) seems to be lost. For example, in the summary page, before…

  • Is there any way to to adjust Storage Groups on ESM without logging to Arcsight Management Center?

    Hello Guys! So the question is right in the subject Currently we have 2 Percent of free space left, and we have a bug which not allows us to log in to ArcSight Management Center for a half of a year already (investigating it with support). So is there…

  • Allocated space in ESM

    Hi, I need some help on the allocated space in ESM 6.8. We have configured allocated space to be 1.2 TB, but thye default storage group max.size is only 360 GB , with retention of 30 days. We have archiving ON What do these setting mean? My understanding…

  • ESM 6.8 storage significantly less compressed than 6.0?

    I was wondering if anyone else has run into this and had some information. We started pulling some stats on our new environment (13 ESMs, 100K EPS expected), and noticed a huge difference between our 6.0 system running average 15-20k EPS and 6.8 running…

  • How to delete a storage group?

    I've read the logger admin guide and don't see any mention of deleting storage groups. Is there a way to delete them? I'm only seeing options to add them.

  • (Expecting version 7 from server, got 6) after logger upgrade from 5.5 to 6.0

    I’m upgrading software logger from 5.5. to 6.0 then to 6.0.1. I performed the console upgrade on RHEL and it completed successfully. I had to log into the GUI with the built in admin account. It told me I have to perform a one-time storage group configuration…

  • Is it possible delete,rename and change size of storage group in Logger via sql commands?

    Hi all, I ask you if it is possible via sql command, rename, delete and change size of a storage group in Logger like this: change size: update alg_storagevolume where id =720575940379279999 set size=835371139072; rename storage group: update alg_storagevolume…

  • SmartConnector for HP Blades and HP Storage

    Dear All, Does SmartConnector support collecting events from HP Blade Servers and/or HP Storage ? BR, Mostafa Soliman

  • Logger storage increase

    Dear people, We are ruuning out of space in the main storage group. Currently, we are using 6 Disk with 1 TB each. There is no more space available to do an expand. How can we deal with it? It is possible to upgrade new disks on the RAID controller and…

  • One-time setup of the storage volume settings

    I just turned my appliance on yesterday and followed the instructions to start the system. I accepted the user agreement, added my license to the device, and thought I was good to go. I'm logged into the GUI and I have a message at the top of the window…

Resources

Support
Documentation
Learning Services
Partner Programs
Privacy
Compliance
Help
Company
Privacy Policy
Terms of Use
Cookies Preferences
Accessibility
Anti-Slavery Statement
Support
Contact Us
Careers
Code of Business Conduct and Ethics
The opinions expressed above are the personal opinions of the authors, not of OpenText. By using this site, you accept the Terms of Use. Certain versions of content ("Material") accessible here may contain branding from Hewlett-Packard Company (now HP Inc.), Hewlett Packard Enterprise Company, or Micro Focus. As of January 31, 2023, the Material is now offered by OpenText, a separately owned and operated company. Any reference to the HP, Hewlett Packard Enterprise/HPE, and Micro Focus marks is historical in nature and the HP, Hewlett Packard Enterprise/HPE, and Micro Focus marks are the property of their respective owners.