NetWitness Community

I would also suggest to follow the Core Appliances Backup and Recovery - RSA Security Analytics Documentation guide in case of issue during relocation.

Remove all the alerts: db.alert.remove() db.incident.remove({}) ( hum not sure about the {} but this is what is writtent in my personal cheat sheet )

[root@saesarchvr ~]# mongo im -u ******-p ****** (replace ***** with user / password of the im database)TokuMX mongo shell v1.4.2-mongodb-2.4.10connecting to: im> db.alert.aggregate( [ { $group: { _id: "$alert.source", count: { $sum: 1 } } } ]){ "res...

You need to logon with the appropriate mongodb ID/password.

I have done this on the "Alert" part of the DB, should be similar for the "Incident" tables SSH login on the ESA boxLogin to the mongo DBCheck how many alerts are stored: db.alert.aggregate( [ { $group: { _id: "$alert.source", count: { $sum: 1 } } } ...