In upgrading from RSA SA 10.6.6 to NetWitness 11.3 - the downtime begins as soon as we run the backup script, right? We've got to stop the aggregation and processing of logs prior to executing backup.
Also, the downtime will continue through the migration of data disk drives from the old 10.6.6 VM to the new 11.3 VM, restoration of configuration, all the way until the provisioning of the SA servers on the 11.3 VMs, right?
