Historical logs with Z-Connector

[RSAAdmin]

Hi,

We have an envision appliance with 400+ devices and have migrated to Security Analytics. We still need to keep all the envision data live and should be able to fetch historical data from SA itself. Will it be possible to fetch historical data if we install Z-connector which forwards envision logs?

[AnkushBaveja · Accepted solution]

hi,

Zconnector forwards realtime incoming logs from envision collector to SA. In short, Zconnector does not fetch historical data.

For historical data one can utilize IPDB extractor service, which connects SA reporting engine to envision IPDB for reporting purpose.

-ab

[RSAAdmin]

We have a DAS connected to our Envision box and as per a document, SA does not support ipdb running on DAS. Is there any alternative for migrating from Envision to SA??

[AnkushBaveja]

It only requires to share csd and data folder.. I would give it a shot anyway

[Anonymous]

How much historical data are we talking?  You could always do the NwLogplayer method but it would be very ugly, and personally only usable if you need to tell an auditor that you have the logs.