ArcSight ESM Content Archive Script

File uploaded by on Jun 17, 2016
Version 1Show Document
  • View in full screen mode

This script backs up the current content on the ESM manager to the /opt/arcsight/logger/data/archives/arcsight_content_archive/ directory.  It will delete files older than 14 days, this can be changed in the script.   The instructions are in the script on how to install it and set up cron jobs.   If the archive is too large you can copy and rename the script and change the archive command to do subsets of content, see archive command for ways to do this.