SIEM Appliance Relocation

[RSAAdmin]

Hey,

I'm in the process of relocating my SA & HYBRID appliances within the upcoming week.

Can anyone share the best-practice to properly shutdown and check the appliances services and everything once up again.

Thanks

[RSAAdmin · Accepted solution]

Hi,

So I just asked the same question in the thread, just to verify what was what. Here is the link:

The best way to make sure everything comes up clean is to watch the logs as it boots, then check the agg/consumption rates once you have it back up.

Hope this helps!

[BenoitRostagni]

I would also suggest to follow the  Core Appliances Backup and Recovery - RSA Security Analytics Documentation guide in case of issue during relocation.

[RSAAdmin]

Hey Guys,

I logged a case with support and they provided KB article 28920

Do you think it covers the process and if I am to summarize the procedure I will go for:

• take backup of SA & HYB DB and config files --> any thought on this ???
• Shutdown HYB
• After 5 min unplug the DAG on HYB
• Shutdown SA (NO DAC)
• For Power on, DAC goes first then HYB appliance than SA and conduct health check --> any specific commands other than check bonding ....

and hopefully everything goes well

Appreciating your feedback to validate this procedure and bring it to successful ending.

Best