Highlighted
Super Contributor.
Super Contributor.
565 views

Backup and recovery process, DR process for arcsight! any idea, documents..will be great help. Thanks

Jump to solution

I am working on  creating a backup and recovery process and dr process flow for arcsight 6.5

please suggest what should I include and if you have any sample document to share will be highly helpful. Thanks

Tags (1)
0 Likes
1 Solution

Accepted Solutions
Highlighted
Acclaimed Contributor.
Acclaimed Contributor.

Re: Backup and recovery process, DR process for arcsight! any idea, documents..will be great help. Thanks

Jump to solution

Have you seen the following thread:

https://protect724.hp.com/message/21933#21933

Its pretty comprehensive and discusses the issues and problem, but there is a script provided that will do this for you. However, please note that there are several sections that need consideration here:

1) Event archives

2) Configuration setup

3) Customizations

In the case of event archives, I STRONGLY recommend you setup and configure event archives - and enabling archiving. Once you do this, make sure you copy and backup the archive partition on to some external storage. This is effectively the event log backup process - its done daily, so consider it a daily backup.

Then there is the configuration setup - see the link above for this for the export of the configuration so that you can restore it. This is a process that needs some consideration and security, but this is the configuration data.

Finally is any OS customizations that you have - this is your responsibility and you can use what you want.

View solution in original post

0 Likes
4 Replies
Highlighted
Acclaimed Contributor.
Acclaimed Contributor.

Re: Backup and recovery process, DR process for arcsight! any idea, documents..will be great help. Thanks

Jump to solution

Have you seen the following thread:

https://protect724.hp.com/message/21933#21933

Its pretty comprehensive and discusses the issues and problem, but there is a script provided that will do this for you. However, please note that there are several sections that need consideration here:

1) Event archives

2) Configuration setup

3) Customizations

In the case of event archives, I STRONGLY recommend you setup and configure event archives - and enabling archiving. Once you do this, make sure you copy and backup the archive partition on to some external storage. This is effectively the event log backup process - its done daily, so consider it a daily backup.

Then there is the configuration setup - see the link above for this for the export of the configuration so that you can restore it. This is a process that needs some consideration and security, but this is the configuration data.

Finally is any OS customizations that you have - this is your responsibility and you can use what you want.

View solution in original post

0 Likes
Highlighted
Super Contributor.
Super Contributor.

Re: Backup and recovery process, DR process for arcsight! any idea, documents..will be great help. Thanks

Jump to solution

Hi Paul,

Is there any flow / process diagram available for both backup and DR?

That link was really resourceful to understand the how part.

0 Likes
Highlighted
Absent Member.
Absent Member.

Re: Backup and recovery process, DR process for arcsight! any idea, documents..will be great help. Thanks

Jump to solution

Does the script work for ESM 6.8c as well?

0 Likes
Highlighted
Acclaimed Contributor.
Acclaimed Contributor.

Re: Backup and recovery process, DR process for arcsight! any idea, documents..will be great help. Thanks

Jump to solution

Now you have an official guide from HP: See

0 Likes
The opinions expressed above are the personal opinions of the authors, not of Micro Focus. By using this site, you accept the Terms of Use and Rules of Participation. Certain versions of content ("Material") accessible here may contain branding from Hewlett-Packard Company (now HP Inc.) and Hewlett Packard Enterprise Company. As of September 1, 2017, the Material is now offered by Micro Focus, a separately owned and operated company. Any reference to the HP and Hewlett Packard Enterprise/HPE marks is historical in nature, and the HP and Hewlett Packard Enterprise/HPE marks are the property of their respective owners.