Restoring incidents
Updated: 10 Oct 2010 | 3 comments
Hello,
I have two ssim devices, one collection and one correlator. They act as sort of an HA pair, such that if the correlator goes down, then the collection device will have its correlation service enabled.
In the event that this happens, how can I transfer the incident data from the collection device to the collection device? Is it possible?
Thanks!
Discussion Filed Under:
Comments
Do you mean LDAP sync in
Do you mean LDAP sync in HA?
You cannot tranfer the incident DB. There is no sync option. You can do event forwarding and collerate the same events on the secondary appliace with the same rules (those are the same bacause of LDAP sync).
BB
this might help... but i'm
this might help... but i'm not sure if what your trying to do is possible...
http://service1.symantec.com/support/ent-gate.nsf/...
Not possible right now. The
Not possible right now.
The product doesn't have the capability to do DB2 replication. (I know product management looking at it for future version).
Your only option is to do correlation forwarding, so all the events correlated on primary correlation appliance are also forwarded to secondary correlation too. If one goes down the other one as very similar information, but it will never be the exact same.
Would you like to reply?
Login or Register to post your comment.