Is it proper way to migrate collected data (metadb, packetdb, sessiondb) to new appliance? For example we have appliances series 4 (SA Server, LogHybrid) 10.6.x (or 11) version and want to migrate our data to new appliances series 6 (SA Server, LogHybrid) 11 version. Is it enough to copy /var/netwitness/* to new appliance and restart services to see and operate previosly collected data (metadb, packetdb, sessiondb)?
You can just move the database files from the old appliance to the new. However this does not enable the new appliance within the UI as if it were the old appliance. You would need to enable the new appliance in the UI as a new server. Once that was done you would just connect up the old databases to the same locations in the new appliance that they were connected to in the old. If you have more than one DAC/PowerVault you need to make sure that all the mount points and /etc/fstab are set correctly for the storage. You also need to go and manually add the mount locations into the configuration for the meta.dir, session.dir, packet.dir and index.dir. Once that was done a reconfig would need to be performed on the database folder in Explore view. Then you should be ready to take up where you left off as if the server had always been there.