Removing a Logger after Its Data Is Copied to the ArcSight Database

This process is optional. Not available to customers in the ArcSight SaaS environment.

After you have successfully imported the metadata , you have the option to remove or repurpose that particular Logger. The next phase, where you import the archived event data, does not require the Logger.

1. To ensure that the Logger will no longer receive events, reconfigure the SmartConnectors to send events to the ArcSight SaaS environment.

2. Log in to ArcSight.

   Note that your login role must have the Logger Data Migration permission.

3. Select Configuration > Import Logger Data > Data Import.

4. Verify that all archives are listed and thus ready for import to the ArcSight Database.

   We recommend that you check the listed archives to ensure that you have copied all desired metadata from each Logger.

5. Shut down the Logger process.

   You can now repurpose the Logger host system.