Selective Backup of RSA Security analytic logs

[Anonymous]

Hi All,

We need to configure selective archival of logs from few of the devices i.e. Logs from a particular log source need to be retained on tape for 10 years.

In RSA Envision, we could achieve this using LSMAINT utility.

Need inputs on how we can achieve the same on RSA Security analytics?

Regards

Shubham Arora

[Anonymous]

Anyone on this please?

Regards

Shubham

[huanzhou1]

only one log decoder? do you have warehouse?

[Anonymous]

Yes we will have a 3-Node warehouse as well.

[RSAAdmin]

Hello,

We have the same request, not exactly for backup/archive, but for scheduled deletion by device type (legacy requirement).

We previously used scheduled 'lsmaint -delete' by device type on RSA enVision

We don't have a Warehouse but only an Hybrid/Log and the answer we received from RSA is to add SA Archiver...

Anyway, the way raw data are stored is realy different from enVision ipdb, and I can't imagine how they should process the selective backup/delete.

Now waiting for details on Archiver.

Sebastien

[Anonymous]

HI Subastien

Have you got any information on Archinver. As we have the SAW 4 nodes so do we need to have Archiver.