Highlighted
Trusted Contributor.
Trusted Contributor.
80 views

how to increase archive import size?

Hi experts,

 

I'm trying to update a large active list with archive command line utility.  However, it seems to fail when the file I'm updating is over 300MB.

/opt/arcsight/manager/bin/arcsight archive -i -u blah -p blah -f /tmp/blah_achive_file.xml -m manager-host
 
Assuming ARCSIGHT_HOME: /opt/arcsight/manager
Assuming JAVA_HOME: /opt/arcsight/manager/jre
 
ArcSight Archive Utility starting...
 
Configuration initialized: config/server.defaults.properties; config/server.properties
Using configuration from : ESM
   ___           _____      __   __
  / _ | ________/ __(_)__ _/ /  / /_
 / __ |/ __/ __/\ \/ / _ `/ _ \/ __/
/_/ |_/_/  \__/___/_/\_, /_//_/\__/
    Archive Utility /___/ Version 7.0.0.2410.0 (BE2410_3-28-2018_1:40:0)
 
Copyright (c) 2001-2020 Hewlett-Packard Enterprise Development Company, L.P.
All rights reserved.
Logging in to manager '' with username ''...done.
JVM memory allowed: 981.5 MB
System locale: en_US
 
Will now perform archive operation with format default on the following files:
/tmp/blah_achive_file.xml
 
---------------------------------------------------------------------------
Parsing archive '/tmp/seclytics_achive_file.xml'... com.arcsight.common.archive.ArchiveException: Invalid archive:The element type "values" must be terminated by the matching end-tag "</values>".
at helma.xmlrpc.XmlRpcClient$Worker.remoteExceptionFound(Unknown Source)
at helma.xmlrpc.XmlRpcClient$Worker.getExceptionFromFaultMap(Unknown Source)
at helma.xmlrpc.XmlRpcClient$Worker.faultFound(Unknown Source)
at helma.xmlrpc.XmlRpcClient$Worker.execute(Unknown Source)
at helma.xmlrpc.XmlRpcClient.execute(Unknown Source)
at com.arcsight.manager.XmlRpcManager.privateExecute(XmlRpcManager.java:556)
at com.arcsight.manager.XmlRpcManager.execute(XmlRpcManager.java:346)
at com.arcsight.common.archive.remote.RemoteImportArchive.importArchive(RemoteImportArchive.java:399)
at com.arcsight.common.archive.ArchiveUtility.importArchiveFiles(ArchiveUtility.java:2929)
at com.arcsight.common.archive.ArchiveUtility._importArchiveFiles(ArchiveUtility.java:2807)
at com.arcsight.common.archive.ArchiveUtility.main(ArchiveUtility.java:1366)
 
Failure During Archive Process:Invalid archive:The element type "values" must be terminated by the matching end-tag "</values>".
 
---------------------------------------------------------------------------
Import Failed. Elapsed Archive Time:9 secs 895 ms
 
 
I saw that this property in server.defaults.properties:
persist.file.size.total.max=300
 
So I added the following property to server.properties,
persist.file.size.total.max=800
 
but it didn't seem to make a difference.
 
There are two other "related" properties, which I don't know what they do exactly:
persist.file.size.max=30
persist.file.size.archive.size.max=10240
 
Can you advice these to be updated as well?  What's the baseline size?  Thanks!
0 Likes
The opinions expressed above are the personal opinions of the authors, not of Micro Focus. By using this site, you accept the Terms of Use and Rules of Participation. Certain versions of content ("Material") accessible here may contain branding from Hewlett-Packard Company (now HP Inc.) and Hewlett Packard Enterprise Company. As of September 1, 2017, the Material is now offered by Micro Focus, a separately owned and operated company. Any reference to the HP and Hewlett Packard Enterprise/HPE marks is historical in nature, and the HP and Hewlett Packard Enterprise/HPE marks are the property of their respective owners.