Happy New year. We are planning a migration project for a McAfee ESM customer and are wondering if you could please clarify the following questions:
1. Can the log data stored in an ESM be moved to a new ESM?
2. Can McAfee Event receiver(s) send data to more than one ESM?
1. Yes. You can take a data backup from the current ESM and restore the same onto another ESM
2. Yes. It can send data to more than 1 ESM. This works when you configure the ESMs in clustered setup one of them will be management node and another ESM will act as a replica node(which has the exact copy of data from management node). Receiver is capable to send event data to both the ESMs at the same time and only the difference in data between the ESMs will be synced over.
Don't forget, when your helpful posts earn a kudos or get accepted as a solution you can unlock perks and badges. Those aren't the only badges, either. How many can you collect? Click here to learn more.
Community Help Hub
New to the forums or need help finding your way around the forums? There's a whole hub of community resources to help you.