• What it is ? Why is it needed? How critical is it?

    Hello, I need your advice. I don't know enough about such things, so please advise. I received a letter from ESM with a warning: EventArchive location /opt/arcsight/logger/data/archives/ has used 99% of the cap space. Please free up some cap by moving…
  • Is anyone has a documentation on how to migrate Event Archive data to a different NFS location/path?

    Hi, Is anyone has a documentation or procedure on how to migrate Event Archive data of ArcSight logger to a different NFS location/path? We will decommission the old NFS server used for event archiving so the event archive data needs to be moved to the…
  • ESM Archive "eventstore.size.minimum"

    trough finding the the ESM create daily archive files of 1gig. wondering if we can change this default value to a lower value. like 500megs etc. by looking at the logger.propreties file we can see that the eventstore.size.minimum is setup at 6990059262…
  • Make ESM 6.5 Archive Searchable from different location

    Dear All, I have an ESM 6.5.1 on which I have saved the Offline Events Archive in the default location until just a few days ago: /opt/arcsight/logger/data/ archives In order to accommodate more archiving space, I mounted a new partition and configured…
  • Moving event archives to remote location

    In a live scenario, we eventually need to move event archives (that have aged off) from our logger or ESM setup to an external storage in order to adhere to compliance. I believe these events are no longer searchable, but can be retrieved by loading or…
  • Dealing with Archives ESM6.0

    Dear All, Ive an issue with Event Archives space - its now 90% completed. I'm looking for couple of things below : How to increase the Archives space for more storage ? How can I store deactivated/fully archived logs externally without affecting any process…
  • ArcSight ESM and Express Event Archive

    Hello All, I have been searching documentation for some detailed explanation about the " logger.archive.space.allocated-in-gb " option in the /opt/arcsight/logger/current/arcsight/logger/user/logger/logger.properties ArcSight ESM/Express file but I was…