Export system tables – CORR-E - ESM service down
command :Getting a system dump, referred to as export system tables
Oracle: $ARCSIGHT_HOME/bin/arcsight export_system_tables /@ORACLE_SID Example: /opt/arcsight/db/bin/arcsight export_system_tables arcsight/arcsight@arcsight Output file is in $ARCSIGHT_HOME/arcsight.dmp
MySQL: /sbin/service arcsight_services stop manager Execute the following command from /opt/arcsight/manager/bin to export the tables: ./arcsight export_system_tables <mysql_username> <mysql_dabatbase> Example: /arcsight export_system_tables arcsight arcsight arcsight Output file is: /opt/arcsight/manager/tmp/arcsight_dump_sy stem_tables.sql start the Manager: /sbin/service arcsight_services start manager
As alluded to above in his response, System Tables are the collection of all User Custom Content, plus some System Specific Content tables - basically almost everything stored in the mysql database EXCEPT the arcsight.user_sequences table and the arcsight.arc_event table. The arc_event table is special because it represents the data stored via the Logger Data Chunks/proprietary storage engine plugin to mysql. It would not be practical for many reasons to dump this into an SQL file.
Hopefully this helps clarify things a bit.
Thanks and Regards,
ESM Product Manager
System table is crucial sql file that contains all manager content (rules, filters, etc..) up to date that file has created. But it does not has db data and trend data. So its good practice for maintain system table at lease monthly.