Cadet 1st Class
Cadet 1st Class
1003 views

Notifications reset and housekeeping

Jump to solution

- is there a way to clear the notification database kept by the ESM

to start over scratch .

-what would be the default esm process to recycle the notification database

or would it grow for ever ?

Labels (1)
0 Likes
1 Solution

Accepted Solutions
Fleet Admiral
Fleet Admiral
  1. Address the root cause first - Identify the rule that caused the bulk of the notifications

  1. Shut off the Manager Service:
  • /etc/init.d/arcsight_services stop manager

  1. Log into MySQL:

  · cd /opt/arcsight/logger/current/arcsight/bin/ 

  • ./mysql -u arcsight –p

  1. Delete Notifications:
  • mysql> use arcsight;
  • mysql> delete from arc_notification_history;
  • mysql> delete from arc_notification_registry;
  • mysql> commit;

  1. Restart Manager Service
  • /etc/init.d/arcsight_services start manager

View solution in original post

0 Likes
8 Replies
Fleet Admiral
Fleet Admiral

There's a HP Support KB on this topic -> https://softwaresupport.hp.com/group/softwaresupport/search-result/-/facetsearch/document/KM1270476

, , what's the word on us copying stuff over from that KB store to P724?

0 Likes
Absent Member.
Absent Member.

! I've been working with the KB team and KB Manager and the plan is for him to move the top 25 KB articles by next week and each month, to update regularly with KB articles. We've been pulling metrics of what is most viewed/most useful for users and wanting the content to most applicable and up-to-date for the community. Great timing in asking and I'll be keeping the community updated once he's done migrating more of the content over.

0 Likes
Fleet Admiral
Fleet Admiral

Awesome, good to know. I had started submitting feedback on those KB articles there, so it's good to know somebody is looking at them

0 Likes
Cadet 1st Class
Cadet 1st Class

1) Does the same command apply to Express Corr Engine :

delete from arc_notification_history;

delete from arc_notification_registry;

commit;

2) And how to connect to the database Corr Engine ?

0 Likes
Fleet Admiral
Fleet Admiral
  1. Address the root cause first - Identify the rule that caused the bulk of the notifications

  1. Shut off the Manager Service:
  • /etc/init.d/arcsight_services stop manager

  1. Log into MySQL:

  · cd /opt/arcsight/logger/current/arcsight/bin/ 

  • ./mysql -u arcsight –p

  1. Delete Notifications:
  • mysql> use arcsight;
  • mysql> delete from arc_notification_history;
  • mysql> delete from arc_notification_registry;
  • mysql> commit;

  1. Restart Manager Service
  • /etc/init.d/arcsight_services start manager

View solution in original post

0 Likes
Cadet 1st Class
Cadet 1st Class

Thanks a lot Richard ,

this is what i was looking for ,

Is there a default password for the database on the express appliance

or it should have been set during the  installation .

0 Likes
Cadet 1st Class
Cadet 1st Class

what happens to the accumulated notifications , if not manually cleaned ,

Do they apply same ruled of events archiving and retention

no matter the status of acknowledgment ?

0 Likes
Fleet Admiral
Fleet Admiral

Good question! I would hope that they'd expire as well. Let me see what I can find out

0 Likes
The opinions expressed above are the personal opinions of the authors, not of Micro Focus. By using this site, you accept the Terms of Use and Rules of Participation. Certain versions of content ("Material") accessible here may contain branding from Hewlett-Packard Company (now HP Inc.) and Hewlett Packard Enterprise Company. As of September 1, 2017, the Material is now offered by Micro Focus, a separately owned and operated company. Any reference to the HP and Hewlett Packard Enterprise/HPE marks is historical in nature, and the HP and Hewlett Packard Enterprise/HPE marks are the property of their respective owners.