Highlighted
Super Contributor.. Super Contributor..
Super Contributor..
520 views

Move all event data from ArcSight Express ver 4.0 to ESM Express 6.9.1

Dear everybody,

Now, I need to transfer all event data from Express v4 CORR Engine to ESM Express 6.9.1. Anyone have experience for this?

Thanks for your help,

Lap

Never give up
Labels (1)
0 Likes
6 Replies
Highlighted
Honored Contributor.. Honored Contributor..
Honored Contributor..

Re: Move all event data from ArcSight Express ver 4.0 to ESM Express 6.9.1

There is a migration tool which HP have created to perform appliance migration from Gen7 AE (running Express 4.0P1) to a Gen9 AE (running Express 6.9.1)

See https://marketplace.saas.hpe.com/arcsight/content/g7-to-g9-migration-tool

Works pretty well, although it doesn't do any migration of forwarding connectors - download the tool and read the PDF for details on what it does and doesn't do.

I have used it successfully to transfer AE4.0P1 on a Gen7 (and a Gen 😎 to a new Express 6.9.1 appliance

Highlighted
Super Contributor.. Super Contributor..
Super Contributor..

Re: Move all event data from ArcSight Express ver 4.0 to ESM Express 6.9.1

Thank Richard Davis

I will follow your recommendation.

Lap

Never give up
Highlighted
Super Contributor.. Super Contributor..
Super Contributor..

Re: Move all event data from ArcSight Express ver 4.0 to ESM Express 6.9.1

Dear Richard Davis

Which port I need to open for backup from AEv4 patch 1 to EE6.9.1?

Thanks,

Lap

Never give up
0 Likes
Highlighted
Micro Focus Expert
Micro Focus Expert

Re: Move all event data from ArcSight Express ver 4.0 to ESM Express 6.9.1

Hello Lap,

See the attached PDF ->

Hope this helps,

BR

Lar

Highlighted
Honored Contributor.. Honored Contributor..
Honored Contributor..

Re: Move all event data from ArcSight Express ver 4.0 to ESM Express 6.9.1

The migration tool requires TCP port 22 (it performs multiple file copies using scp/ssh between the old and new AE)

Highlighted
Super Contributor.. Super Contributor..
Super Contributor..

Re: Move all event data from ArcSight Express ver 4.0 to ESM Express 6.9.1

Dear Richard Davis

It is helpful to me. I did follow your sharing and completely migrate AE ver 4 to EE 6.9.

Thank you very much,

Lap

Never give up
0 Likes
The opinions expressed above are the personal opinions of the authors, not of Micro Focus. By using this site, you accept the Terms of Use and Rules of Participation. Certain versions of content ("Material") accessible here may contain branding from Hewlett-Packard Company (now HP Inc.) and Hewlett Packard Enterprise Company. As of September 1, 2017, the Material is now offered by Micro Focus, a separately owned and operated company. Any reference to the HP and Hewlett Packard Enterprise/HPE marks is historical in nature, and the HP and Hewlett Packard Enterprise/HPE marks are the property of their respective owners.