Obtain the Reconstruct Mounts Script
Does not apply in a SaaS environment
The following steps will allow you to obtain the instructions for mounting the archives in the ArcSight Database.
-
Navigate to the scripts folder in the ArcSight Database server, by default
/opt/arcsight-db-tools/scripts/.This is where the loggerToReconConstructMounts.sh script is located.
-
To move the script to the Logger server from which you want to import event data, execute the following command:
scp /opt/arcsight-db-tools/scripts/loggerToReconConstructMounts.sh root@<LOGGER IP>/opt/