Acclaimed Contributor.. Acclaimed Contributor..
Acclaimed Contributor..
1793 views

Clear Cache on Logger / Connector manually

Clear Cache on Logger / Connector manually

  • login to the Web UI of the appliance
  • go to Sytem Admin --> Process status --> and stop the "connector"-process Note: Choose the container where you want to clear the cache (only ConnApp)!
  • enable support login with challange/response from ArcSight support
  • login with ssh and clear all data in the agentdata directory:

  1. Logger: /opt/arcsight/connector/current/user/agent/agentdata/
  2. Connector: /opt/arcsight/conntainer_1/current/user/agent/agentdata/ Note: Choose the right container where you want to clear the cache!

  • start the process again through the Web UI
Labels (3)
4 Replies
Highlighted
Super Contributor.
Super Contributor.

Re: Clear Cache on Logger / Connector manually

So I should delete ALL the files in the directory, is that correct?

0 Likes
Highlighted
Super Contributor.
Super Contributor.

Re: Clear Cache on Logger / Connector manually

Is there no way to do this through the web UI?

Only manually?

Any plans to introduce this in the future?

0 Likes
Highlighted
Absent Member.
Absent Member.

Re: Clear Cache on Logger / Connector manually

I just saw this blog.

To answer your question:

That is correct.  Just delete all the files in the /agentdata/ folder.

But only when you really do NOT need the events and if your company's security policy allows it..

0 Likes
Highlighted
Absent Member.
Absent Member.

Re: Clear Cache on Logger / Connector manually

Again, I just saw this blog.

I have NOT seen a GUI that will allow you to do that yet.

0 Likes
The opinions expressed above are the personal opinions of the authors, not of Micro Focus. By using this site, you accept the Terms of Use and Rules of Participation. Certain versions of content ("Material") accessible here may contain branding from Hewlett-Packard Company (now HP Inc.) and Hewlett Packard Enterprise Company. As of September 1, 2017, the Material is now offered by Micro Focus, a separately owned and operated company. Any reference to the HP and Hewlett Packard Enterprise/HPE marks is historical in nature, and the HP and Hewlett Packard Enterprise/HPE marks are the property of their respective owners.