${resource:CF_GenericContent}test

If an answer to your question is correct, click on "Verify Answer" under the "More" button.  The answer will now appear with a checkmark.  Please be sure to always mark answers that resolve your issue as verified.  Your fellow Community members will appreciate it!  Learn more.

  • State Verified Answer
  • Replies replies
    3
  • Subscribers subscribers
    24
  • Views views
    231
  • Users 0 members are here

What it is ? Why is it needed? How critical is it?

Bohdan Hotsuliak

Hello, I need your advice.

I don't know enough about such things, so please advise. I received a letter from ESM with a warning: EventArchive location /opt/arcsight/logger/data/archives/ has used 99% of the cap space. Please free up some cap by moving eventarchive directories to some other place.

Is this situation critical? Is there a solution without moving the catalogs with the archive?

Thanks in advance

Bohdan

Parents Reply

  • Verified Answer

    +1   in reply to 

    Yes, the event data would get archived on a daily basis from when you have setup archives.  It would be your choice if you decide you need this archived data or not.  If you never plan to go back that far and search the older archived events and if you don't need it for any compliance reasons, then you probably would not need it.  Again, that would be something for you to determine.  

Children
No Data

Resources

Support
Documentation
Learning Services
Partner Programs
Privacy
Compliance
Help
Company
Privacy Policy
Terms of Use
Cookies Preferences
Accessibility
Anti-Slavery Statement
Support
Contact Us
Careers
Code of Business Conduct and Ethics
The opinions expressed above are the personal opinions of the authors, not of OpenText. By using this site, you accept the Terms of Use. Certain versions of content ("Material") accessible here may contain branding from Hewlett-Packard Company (now HP Inc.), Hewlett Packard Enterprise Company, or Micro Focus. As of January 31, 2023, the Material is now offered by OpenText, a separately owned and operated company. Any reference to the HP, Hewlett Packard Enterprise/HPE, and Micro Focus marks is historical in nature and the HP, Hewlett Packard Enterprise/HPE, and Micro Focus marks are the property of their respective owners.