Hello McAfee Community!
I have a question how to reinitialise ELM management database to local store (all-in-one SIEM).
Its stored here /usr/local/elm/mgtdb
When you migrate it to some external storage pool its moved there.
But when the external storage pool died you have no ELM management database.
How to create empty one in usr/local/elm/mgtdb?
ELMD here is complain because there is no DB there.
Oct 26 11:30:26 McAfee elmd: Starting (Parent pid) = 22932
Oct 26 11:30:26 McAfee elmd: Check Database started for /usr/local/elm/mgtdb/elm.dfl
Oct 26 11:30:26 McAfee elmd: Failed to open schema - Error = 3 Oct 26 11:30:26 McAfee elmd: Check Database FAILED on one or more tables.
Oct 26 11:30:26 McAfee elmd: Check Database failed - Terminating.
Thank you. CG1
P153 - https://kc.mcafee.com/resources/sites/MCAFEE/content/live/PRODUCT_DOCUMENTATION/26000/PD26482/en_US/... - Restore ELM management database and log data
But I'd rather fix the DB instead of creating a new one :-)
1. Make sure ELM processes are stopped (ELMStop)
2. DBCheck -d '/usr/local/elm/mgtdb/elm.dfl|127.0.0.1|1111' -c
3. And then DBCheck -d '/usr/local/elm/mgtdb/elm.dfl|127.0.0.1|1111' -c -t "CORRUPT_TABLE" -r
4. DBCheck -d '/usr/local/elm/mgtdb/elm.dfl|127.0.0.1|1111' -c
For more information check DBCheck -h
thank you for your reponse.
This is really the case of building it from the cratch. Its not possible to migrate it according the GUI.
DBCheck is a nice command I did not know about, but unfortunatelly it depends on the presents of the files of DB.
Since there is nothing it ends with error. Also it dasnot have some init command or such. It seems
that this command is for solving the issues with the DB if exits. If the directory is empty, it will not help.
Thank you. Marian Lysak