delete the bulk dead assets
I have a long liust of Assets showing in ArcSight. most of them are shutdown. How can I delete the Assets from Asset list.
If you want to blow away all your assets... try this (in test first ... of course). Stop all services except mysql.
### To verify the # of assets
mysql> select count(*) from arc_resource where resource_type = 4;
### To remove those assets
mysql> delete from arc_resource where resource_type = 4;
After this is done.. start all your services again
If this helps, mark this thread as answered and the thread too.
But I just want to disable or remove the dead assest.
If I go through your step. then how can I get the active/alive assets again.
If you want to disable all Assets you can use the below query unless you want to add more clauses to control which specific Assets that you want to disable (for example, these Assets were created by certain dates):
update arc_resource set DISABLED = 1 where resource_type = 4;
update arc_resource set DISABLED = 1 where resource_type = 4 and CREATED >= 'xxxxx';
When you want to reactive these Assets later:
update arc_resource set DISABLED = 0 where resource_type = 4;