Welcome Serena Central users! CLICK HERE
The migration of the Serena Central community is currently underway. Be sure to read THIS MESSAGE to get your new login set up to access your account.
Highlighted
chris.lee@excer1 Absent Member.
Absent Member.
404 views

arcsight express v4 corre engine archive storage full

Hi All,

currently my express v4 archive storage is full. is it a way to delete it?

thank you.

Regards,

CL

Labels (1)
Tags (1)
0 Likes
Reply
4 Replies
sparky1 Absent Member.
Absent Member.

Re: arcsight express v4 corre engine archive storage full

Best to move it, unless you know for sure that you don't need it.

If you want to delete it, then go to /opt/arcsight/logger/data/archives and delete the older archives (the folder names are date stamps)

If you really don't need archives, then you can also stop them from being created via the web front end. They are enabled by default.

0 Likes
Reply
Acclaimed Contributor.. lless Acclaimed Contributor..
Acclaimed Contributor..

Re: arcsight express v4 corre engine archive storage full

In scheme work Express has restriction for size folder /opt/arcsight/logger/data/archives.

But in practice Express has free 1Tb in /opt folder. You may move archive folder from /opt/arcsight/logger/data/archives to /opt/backup/archives (for example) and archive storage clean up.

0 Likes
Reply
Super Contributor.. linhvm Super Contributor..
Super Contributor..

Re: arcsight express v4 corre engine archive storage full

Hi Evgeny & all,

Do you know whether we can restore/load the archives from an appliance to another one (for example: do a RMA)? Thanks!

0 Likes
Reply
Acclaimed Contributor.. lless Acclaimed Contributor..
Acclaimed Contributor..

Re: arcsight express v4 corre engine archive storage full

On usergroup i see, but restore archive may only with systemtable restore.

Earlier, i use comands for reload in DB all archives:

  1. cd /home/arcsight/logger/current/arcsight/logger/bin
  2. ./arcsight restorearchives -C clear
0 Likes
Reply
The opinions expressed above are the personal opinions of the authors, not of Micro Focus. By using this site, you accept the Terms of Use and Rules of Participation. Certain versions of content ("Material") accessible here may contain branding from Hewlett-Packard Company (now HP Inc.) and Hewlett Packard Enterprise Company. As of September 1, 2017, the Material is now offered by Micro Focus, a separately owned and operated company. Any reference to the HP and Hewlett Packard Enterprise/HPE marks is historical in nature, and the HP and Hewlett Packard Enterprise/HPE marks are the property of their respective owners.