In our McAfee SIEM architecture we have an ESM + ELM + + ACE + 2 pairs of ERC :
We have a combo ETM-4600-ELM in case of failure of our ESM (ETM-5600A).
I'd like to know if it is possible to restore ESM configuration to the combo ? If so, which file and how can I achieve this ?
I need only the configuration of the running ESM and not the data/events.