Quick question – if I need to decommission the entire RSA NetWitness platform / servers, but still need access to Archiver logs for a certain duration, what all components will I have to keep alive?
As per my knowledge, the following will have to be kept alive
1. RSA NetWitness Head Unit
2. Broker
3. Archiver
And the following machines can be safely decommissioned
4. Concentrator
5. ESA
6. Decoder
7. VLC
Is this right? Will the Broker also be needed to be kept alive?
