Improve company productivity with a Business Account.Sign Up

x
  • Status: Solved
  • Priority: Medium
  • Security: Public
  • Views: 1662
  • Last Modified:

Event log back up / Retrieval from ArcSight Logger appliance

I would like to know if it's possible to retrieve event logs from an old ArcSight Logger?   I read that by default, the ArcSight Logger does not back up any content but will back up 'All non-event data' and 'Report content' which includes:

• System Information
• Logs
• Global Settings
• User and Group Information
• All Configuration Settings
• Existing Filters and Saved Searches
• Logger Monitor settings
The following Reports content:
• Queries, Reports, Parameters,
Parameter Value Groups, Dashboard
• Templates

I am looking to extract this information if possible to prepare for an upcoming inspection.  Any information would greatly appreciated.

Cheers,
Larry
0
holby
Asked:
holby
  • 3
1 Solution
 
Bernard S.CTOCommented:
Not sure I understand: are you looking for the place where these logs would be?
- usually /var/log is a good place to start
- you can also hunt at /etc/logrotate.d which handles nicely some logs (but be careful here!)

As usual
locate *.log
is your best friend (but do not forget
updatedb
)
0
 
holbyAuthor Commented:
Yes I am looking for the location on the logger where these event logs are stored by default.  We moved away from ArcSight because it was a very convoluted product and extremely difficult to learn unless you were an expert using Unix.  We have since moved to a McAfee Nitro Security appliance and this product is much nicer and is less cumbersome.  Just need to be able to extract the event logs off the logger in case we need to present them for our upcoming inspection.
0
 
Bernard S.CTOCommented:
What gives locate *.log?
0
 
Bernard S.CTOCommented:
B-) Glad I could help. Thx for the grade and points
Bernard
0
Question has a verified solution.

Are you are experiencing a similar issue? Get a personalized answer when you ask a related question.

Have a better answer? Share it in a comment.

Join & Write a Comment

Featured Post

Free Tool: Path Explorer

An intuitive utility to help find the CSS path to UI elements on a webpage. These paths are used frequently in a variety of front-end development and QA automation tasks.

One of a set of tools we're offering as a way of saying thank you for being a part of the community.

  • 3
Tackle projects and never again get stuck behind a technical roadblock.
Join Now