cancel
Showing results for 
Search instead for 
Did you mean: 
cg_z001
Level 7

elm management database reinitialise

Hello McAfee Community!

I have a question how to reinitialise ELM management database to local store (all-in-one SIEM).

Its stored here /usr/local/elm/mgtdb

When you migrate it to some external storage pool its moved there.

But when the external storage pool died you have no ELM management database.

How to create empty one in usr/local/elm/mgtdb?

ELMD here is complain because there is no DB there.

Oct 26 11:30:26 McAfee elmd[23275]: Starting (Parent pid) = 22932

Oct 26 11:30:26 McAfee elmd[23275]: Check Database started for /usr/local/elm/mgtdb/elm.dfl

Oct 26 11:30:26 McAfee elmd[23275]: Failed to open schema - Error = 3 Oct 26 11:30:26 McAfee elmd[23275]: Check Database FAILED on one or more tables.

Oct 26 11:30:26 McAfee elmd[23275]: Check Database failed - Terminating.

Thank you. CG1

0 Kudos
3 Replies
abanaru
Level 11

Re: elm management database reinitialise

P153 - https://kc.mcafee.com/resources/sites/MCAFEE/content/live/PRODUCT_DOCUMENTATION/26000/PD26482/en_US/...  - Restore ELM management database and log data

But I'd rather fix the DB instead of creating a new one :-)

1. Make sure ELM processes are stopped (ELMStop)

2. DBCheck -d '/usr/local/elm/mgtdb/elm.dfl|127.0.0.1|1111' -c

3. And then DBCheck -d '/usr/local/elm/mgtdb/elm.dfl|127.0.0.1|1111' -c -t "CORRUPT_TABLE" -r

4. DBCheck -d '/usr/local/elm/mgtdb/elm.dfl|127.0.0.1|1111' -c

5. ELMStart

For more information check DBCheck -h

Good luck!

0 Kudos
cg_z001
Level 7

Re: elm management database reinitialise

Hello abanaru,

thank you for your reponse.

This is really the case of building it from the cratch. Its not possible to migrate it according the GUI.

DBCheck is a nice command I did not know about, but unfortunatelly it depends on the presents of the files of DB.

Since there is nothing it ends with error. Also it dasnot have some init command or such. It seems

that this command is for solving the issues with the DB if exits. If the directory is empty, it will not help.

Thank you. Marian Lysak

0 Kudos
abanaru
Level 11

Re: elm management database reinitialise

"Restore ELM" should help you in this case (P153 in PD).

0 Kudos