Absent Member.
Absent Member.
1142 views

arcsight archive newids - what's the deal?

Hello,

Is there anyone who could explain the '-newids' tag for the 'arcsight archive' tool?

From the help:

"-newids             newids - All archival objects within an archive will be given new IDs.  All references to these archival objects will have their IDs changed to the new IDs, or removed if the ID is not found in the archive.  This is useful when an archive was created and then all of the resources in the archive were modified to create new resources, but the IDs were retained."

But I have to seen this work in my tests 😞

I'd like to have a multiple resource archive (Use Cases, AL, Active Channels, Rules, Reports, Trends & more) duplicated where all the ID's are to be replaced with new ones to really duplicate content.

Would there be anyone who could explain the inner workings of the '-newids' tag or perhaps push me in the right direction of really duplicating content?

I must be missing something obvious here, but documentation is pretty slim here.

Thanks for the help.

Labels (1)
0 Likes
18 Replies

Hi,

Did you manage to get some info on this as I am also struggeling to make it work.

Kind Regards,

Pushpendra Rathi

0 Likes
Absent Member.
Absent Member.

I asked the Doc lead for ESM to comment on this. 

0 Likes

Thanks 🙂

Lets see when he is gona reply....

0 Likes
Absent Member.
Absent Member.

Hi,

The ESM Doc lead is Jane Mulcaster. (https://protect724.arcsight.com/people/jmulcaster)

You can contact her about this issue.

Thanks,

Liz

0 Likes
Absent Member.
Absent Member.

I am not the subject matter expert for this, but I can research it and figure out the issue so I can appropriately redirect your question. Please stand by...

0 Likes
Absent Member.
Absent Member.

Cool! Standing by..

0 Likes
Absent Member.
Absent Member.

Jane,

Have you found someone who could explain this bit?

Thanks!

0 Likes
Cadet 2nd Class Cadet 2nd Class
Cadet 2nd Class

It seems that the -newids option is not working as expected. You should file a support ticket so that it goes through the investigation process. It would also be good to know the use-case you have. There might be alternate ways to solve your use-case.

Dhiraj

0 Likes
Absent Member.
Absent Member.

Certainly seems like its bust ... was testing some content sync stuff this morning, and I can't get it to generate new ID's.

0 Likes
Vice Admiral
Vice Admiral

Submitted a SR to HP regarding newids not working and here is my reply:

Title: Product Technical Issue:Arcsight Archive tool -newids option does not seem to work.

*** Start of Message ***

Hi Angelo,

We had identified the issue with a bug ID ESM-47652 - Using archive tool with newids flag does not work.

Our developer is working on the issue and it requires major changes and therefore should be addressed in our major release. We will notice you once the issue is fixed in our future release.

Best regards,

Nellie

Really it's not working! "But for how long Mr Spock, for how long".

Can you believe this they will fix it in the next major release.  How many releases have there been since this was first report over a year ago.

I can't believe this company, my confidence in this product is really going to hell.


0 Likes
Absent Member.
Absent Member.

Angelo,

Thanks for this follow-up.

Yours and mine (confidence) could meet up there. There is a little special corner for confidences like ours.

0 Likes
The opinions expressed above are the personal opinions of the authors, not of Micro Focus. By using this site, you accept the Terms of Use and Rules of Participation. Certain versions of content ("Material") accessible here may contain branding from Hewlett-Packard Company (now HP Inc.) and Hewlett Packard Enterprise Company. As of September 1, 2017, the Material is now offered by Micro Focus, a separately owned and operated company. Any reference to the HP and Hewlett Packard Enterprise/HPE marks is historical in nature, and the HP and Hewlett Packard Enterprise/HPE marks are the property of their respective owners.