cancel
Showing results for 
Search instead for 
Did you mean: 

ESM Full Backup - Estimated Space Needed

Hello All,

I am someone relatively new to the ESM, and I am currently trying to calculate what amount of space I need to perform a full backup of the system. Technical Article ID: KB85742 stated to go to the following directory and sum the total values:

  •   a = size of  /usr/local/ess/data/
  •   b = size of  /data_hd/usr/local/ess/data/
  •   c = size of /index_hd/usr/local/ess/data/
  •   d = size of /Das1_hd/usr/local/data/  (this will apply only if you have a Direct Attached Storage (DAS) device connected to your ESM)
  •   e = add 10% to (a+b+c+d)
Can someone guide me through those steps, or is there an easier way to do this via the SIEM's UI?
Thanks in advance!
2 Replies
lalers
Level 7
Report Inappropriate Content
Message 2 of 3

Re: ESM Full Backup - Estimated Space Needed

Hi, 

Here's the easiest way to do it.

Go to each directory as stated and then execute 'du -sh' to get the size 

Sample:

McAfee-ENMELM~ # cd /usr/local/ess/data/
McAfee-ENMELM /usr/local/ess/data # du -sh
1.6G .

Do the same with other directories.

 

Re: ESM Full Backup - Estimated Space Needed

i hope this information can help you

 

you can use the du command

 

McAfee-ETM-5600 ~ # du /usr/local/ess/data/


15381700 /usr/local/ess/data/old_sa
18480516 /usr/local/ess/data/


McAfee-ETM-5600 ~ # du /usr/local/ess/data/
15381700 /usr/local/ess/data/old_sa
18480516 /usr/local/ess/data/

 

etc

 

 

if you want the size un GB you must use the next sentence for every directory

 

du -csh --block-size=1G /usr/local/ess/data/

 In my case the the result are the following


18 /usr/local/ess/data/
18 total

More McAfee Tools to Help You
  • How-to: Endpoint Removal Tool
  • Support: Endpoint Security
  • Visit: Business Service Portal
  • More: Search Knowledge Articles
  • ePolicy Orchestrator Support

    • Download the new ePolicy Orchestrator (ePO) Support Center Extension which simplifies ePO management and provides support resources directly in the console. Learn more about ePO Support Center