Deploying or Upgrading Intelligence and Recon with the Enhanced Database

Because this release significantly changes the ArcSight Database, you cannot upgrade the database. It must be installed as new. However, this release does allow you to upgrade Recon and Intelligence in your environment, as well as install either capability for the first time. This section provides guidance for upgrading or deploying these capabilities:

Upgrading from Intelligence 6.3 or Recon 1.2
Deploying Intelligence or Recon for the First Time in an Upgraded ArcSight Platform Environment
Deploying Intelligence or Recon in a New ArcSight Platform Environment
Deploying or Upgrading Intelligence and Recon with the Enhanced Database

Upgrading from Intelligence 6.3 or Recon 1.2

Micro Focus does not recommend that ArcSight Intelligence customers attempt to upgrade without consulting with Micro Focus as upgrading at this time will result in loss of baseline data. We are aware that this is inconvenient for customers, and we are currently working on addressing this limitation in an future release.

You can upgrade to this release from Intelligence 6.3 and Recon 1.2. However, you cannot upgrade the ArcSight Database because this release supports a cost-effective long-term storage solution that is not available with the previous database version.

For more information about installing this new version of the database, see the following sections in the Administrator’s Guide for ArcSight Platform provided at the ArcSight Documentation site:

For an automated installation in an on-premises environment, see Using the ArcSight Platform Installer
For a manual installation in an on-premises environment, see Installing the Database
For an AWS environment, see Installing the Database in AWS
For an Azure environment, see Installing the Database in Azure

To prevent the current and new databases from ingesting duplicate data, complete the steps outlined for Stopping Event Ingestion on the current database.

To start data ingestion on the new database after upgrading the ArcSight Platform, continue to Completing the Database and Kafka Setup.

Deploying Intelligence or Recon for the First Time in an Upgraded ArcSight Platform Environment

If you currently have the previous release of ArcSight Platform, you can deploy this release of Intelligence and Recon after upgrading ArcSight Platform to 22.1.

Perform the upgrade and installation in the following order:

Upgrade the ArcSight Platform.
Install the new ArcSight Database.
Deploy Intelligence or Recon. For more information, see the Release Notes for ArcSight Platform 22.1 and the Administrator’s Guide for ArcSight Platform.

Deploying Intelligence or Recon in a New ArcSight Platform Environment

To perform a first-time installation of the ArcSight Platform environment including Intelligence 6.4 or Recon 1.4, see the Administrator’s Guide for ArcSight Platform.