pratikp Absent Member.
Absent Member.
330 views

Error in Importing RepSM 1.52 package

Dear All,

I am getting multiple errors while importing RepSM 1.52 package.

1.52 has new resources which 1.0 doesn't exist and it is giving permission error on all those new resources while installing .

Also there is one active list which has capacity of 150000 in 1.52 package and 100000 in 1.0 package. and it doesn't allow upgradation of the same due to capacity issue.

Kindly assist.

Thanks & Regards,

Pratik

Labels (1)
0 Likes
3 Replies
Highlighted
pratikp Absent Member.
Absent Member.

Re: Error in Importing RepSM 1.52 package

In update below issue, please find below snapshot for the same.

Regards,

Pratik

0 Likes
pbrettle Acclaimed Contributor.
Acclaimed Contributor.

Re: Error in Importing RepSM 1.52 package

Have you checked in the Solutions Guide for RepSM around the upgrade process?

You have to go from 1.0 to 1.01 so that you have most of the upgrade issues fixed, and then follow the instructions to identify what content has been changed and why. Its possible that someone (and hence the permissions issue) has changed some of the content and therefore the rights of this are different. You can check this out and follow the installation guide from page 67. That way you can capture the changed stuff, upgrade to 1.01 and go from there.

0 Likes
Micro Focus Expert
Micro Focus Expert

Re: Error in Importing RepSM 1.52 package

Below is a checklist we use for proof of concepts. You need to uninstall 1.0 before installing 1.5.

Follow the steps below to successfully install and configure Reputation Security Monitor v1.55. As of 08/29/2016 the current version of RepSM is 1.55:

  • ArcSight-SolutionPackage-RepSM.1.52.1345.0.arb
  • ArcSight-7.1.7.7607.0-RepSMModelConnector-Linux64.bin
  • ArcSight-7.1.7.7607.0-RepSMModelConnector-Win64.exe

Checklist

  • Configure the Active List capacity.
    • Add the following line to the server.properties file located in <ARCSIGHT_HOME>\config:
      • activelist.max_capacity=2500000
        • As of 08/29/2016, the Malicious Domains Active List is > 2.0 million entries. Modify this entry based on the current list size.
    • Restart the Manager for the new setting to take effect.
  • Edit the “Malicious Domains” Active List
    • Capacity (x1000)=2500
      • This should match the activelist.max_capacity entry in server.properties
  • Verify the “Manager Heap Size (MB)” is set to at least 4 GB.
    • Login to the Management Console in Express or the Control Center in ESM.
    • Verify the “Manager Heap Size (MB)” is set to at least 4 GB.
    • Restart the Manager for any new settings to take effect.
  • Uninstall Reputation Security Monitor 1.0.
    • If you are running Express and Reputation Security Monitor 1.0 is installed, uninstall it.
  • Install Reputation Security Monitor 1.55.
    • ArcSight-SolutionPackage-RepSM.1.52.1345.0.arb
  • If you have Internet access at the proof of concept:
    • Install the Model Import Connector (the Model Import Connector will only install and run on a 64-bit system).
      • After the install, DO NOT start the Model Import Connector.
      • Go into the Console and configure the "Model Import User" to the admin account.
      • By default the Model Import Connector is configured with a heap size of 256 MB. I'd recommend modifying your minimum heap setting to at least 2 GB or 4 GB if you have the memory.
      • Start the Model Import Connector and wait for it to receive the updated configuration.
      • Go into the Console and select “Send Command” > “Model Import Connector” > “Start.”
    • Verify that the Model Import Connector is working.
      • In the Console, go to the Active Lists resource and verify that entries are starting to populate in the following Active Lists (this could take a while):
        • \Active Lists\Shared\ArcSight Solutions\Reputation Security Monitor 1.5
          • Malicious Domains
          • Malicious IP Addresses
  • Deploy the RepSM rules to the Real-time Rules group
    • In the Navigator panel Resources tab, go to Rules and navigate to the “ArcSight Solutions/Reputation Security Monitor 1.5” group.
    • Right-click the “Reputation Security Monitor 1.5” group and select “Deploy Real-time Rule(s).”
    • After a few seconds, the rules in the group will be listed under the “Real-time Rules/Reputation Security Monitor 1.5” group.
    • The rules in this group are linked to the rules in the “ArcSight Solutions/Reputation Security Monitor 1.5” group.
0 Likes
The opinions expressed above are the personal opinions of the authors, not of Micro Focus. By using this site, you accept the Terms of Use and Rules of Participation. Certain versions of content ("Material") accessible here may contain branding from Hewlett-Packard Company (now HP Inc.) and Hewlett Packard Enterprise Company. As of September 1, 2017, the Material is now offered by Micro Focus, a separately owned and operated company. Any reference to the HP and Hewlett Packard Enterprise/HPE marks is historical in nature, and the HP and Hewlett Packard Enterprise/HPE marks are the property of their respective owners.