cancel
Showing results for 
Search instead for 
Did you mean: 
Highlighted
uni
Level 8
Report Inappropriate Content
Message 1 of 2

Can ESM archives be stored offline?

I am trying to get my head around how to effectively set up backup and archiving the ESM database,

  1. If I have set up the ESM to archive events and flows, It will eventually write out data to an archive partition. Can I store the contents of the partition offline somewhere, and be able to restore it if necessary, or does it need to always be available to the ESM?
  2. If a retention time is set under Database/Data Retention, is data rolled into a partition when either data reaches that age or the local storage fills (whichever happens first), or is it that if the storage fills before the data reaches retention age, that older events are dropped from the database?

Thanks

1 Reply
xded
Level 12
Report Inappropriate Content
Message 2 of 2

Re: Can ESM archives be stored offline?

1. You can store the content on iSCASI or a SAN but not offline.

2.:

If click on Database | Data Allocation there is a message "Configure how much space the database should allocate for Events and Flows by specifying the number of records for each table.  The total size is a fixed value. These settings may affect the data retention policy."

So, whichever happes first

More McAfee Tools to Help You
  • Subscription Service Notification (SNS)
  • How-to: Endpoint Removal Tool
  • Support: Endpoint Security
  • eSupport: Policy Orchestrator
  • Community Help Hub

      New to the forums or need help finding your way around the forums? There's a whole hub of community resources to help you.

    • Find Forum FAQs
    • Learn How to Earn Badges
    • Ask for Help
    Go to Community Help

    Join the Community

      Thousands of customers use the McAfee Community for peer-to-peer and expert product support. Enjoy these benefits with a free membership:

    • Get helpful solutions from McAfee experts.
    • Stay connected to product conversations that matter to you.
    • Participate in product groups led by McAfee employees.
    Join the Community
    Join the Community