Open topic with navigation

Import Geolocation Files

The context updates are released twice a month through patch manager. To have the most updated geolocation data, manually import the files to Logger. Be aware that the latest content update release always supersedes all other previous releases.

To download files:

  1. From the ArcSight Logger License SKUs, look for the ArcSight_Context_Update_<month>_<year>.<buildno>.zip file.

  2. Download the context updates from the zip file.

To import files:

Once the file has been downloaded and stored in a secure network location, proceed with the following steps:

  1. From the Configuration menu, go to import content.
  2. Click choose file and look for the Arcsight_Context_Update_CurrentMonth_year.xxxxxx.zip package.
  3. Click import. Logger will display a message acknowledging the request has been completed.
  4. Verify the file has been correctly imported in <loggerInstallation>/config/logger/server/. A new file named ipdataV6.mmdb should appear.

As new release files are imported into Logger every month, previous release files are automatically renamed using the following format: ipdataV6_year-month.mmbd.

Note: By default, Logger stores a maximum of 4 geolocation files. Reports outside storage period are executed using the latest imported file.

To extend file storage:

  1. Go to <LoggerInstallation>/config/logger/logger.defaults.properties
  2. Edit the property mm.num.old.versions.keep to > 4. (Manually add the property if it is not available)
  3. Restart the Logger.