Emergency Restore

The Emergency Restore can be used to restore a severely damaged local container on an appliance. This feature is supported only for containers on the localhost, for the hardware appliance version of ArcSight Management Center.

Users can now reimage and restore from a backup at once in multiple containers. In G8 appliances it allows the user to migrate from 32 bits to 64 bits (rollback can't be performed).

Note: Backed up files can be retrieved by accesing the Backup Files option.

ArcSight recommends that you use this process only when a container is severely damaged and is no longer available. The Emergency Restore process deletes all information about that container and renders it empty. The connector is restored to the AUP version that you select.

To perform an emergency restore:

  1. Click Administration > Repositories.
  2. In the navigation panel, click Emergency Restore.
  3. Follow the instructions in the Container Restore Wizard.

After the process starts, you can check progress in the Job Manager page.