Back Up and Uninstall IdentityView

IdentityView has been renamed to ArcSight User Behavior Monitoring (UBM). This section explains how to back up and uninstall IdentityView so that you can install the UBM package.

Note: Trend data cannot be preserved during the upgrade process.

Identify and Copy Customized Resources

(Optional) you can identify customized IdentityView 2.n resources by generating a list of resources that have changed since the solution packages were last exported. You can then copy those resources and use them as a reference for applying the same customizations to the UBM resources.

Note: Every time a package is exported, the change history is reset.

  1. Log into the ESM Console as the ArcSight administrator.
  2. In the Packages tab of the Navigator panel, expand the ArcSight Solutions group.
  3. Right-click the IdentityView 2.0n solution package () and select Compare Archive with Current Package Contents.

In the Viewer panel, a list of resources associated with the package is displayed. In the Change Since Archive column, any changes to the resource since the last export are displayed, either as Added, Modified, or Removed.

To sort the list and display the changed resources together, click the Change Since Archive column.

  1. Optional: Copy and paste the cells from this table into a spreadsheet.
  2. Copy the resources identified above by dragging them to a group outside of the IdentityView group hierarchy. For example, you might copy customized rules to Admin’s Rules.
  3. Use the copied resources as a reference to customize the UBM resources.

Copying the resources might cause dependency conflict errors, but after you install UBM, you can resolve the conflicts by right-clicking the resources and selecting Validate.

Back Up the IdentityView Active Lists and Session Lists

(Optional when upgradeing from IdentityView to UBM) Use the following procedure to back up the data in your IdentityView active lists and session lists, so you can import the data into UBM.

  1. Log into the ESM Console.
  2. In the Navigator panel, on the Packages tab, right-click Shared/All Packages/Public and select New Package.

The Package Editor opens in the Inspect/Edit panel.

  1. On the Attributes tab, in the Name field, type a name for the package, for example, IdentityViewBackup, and make sure the Format field is set to default
  1. On the Resources tab, click Add, then select Lists|Active Lists.
  1. Check the box next to Active Lists/Shared/All Active Lists/ArcSight Solutions/IdentityView 2.n and click OK.

Alternatively, you can expand the IdentityView 2.n group and select individual lists.

  1. On the Resources tab, click Add again, then select Lists|Session Lists.
  2. Check the box next to Session Lists/Shared/All Session Lists/ArcSight Solutions/IdentityView 2.n and click OK.

Alternatively, you can expand the IdenityView 2.ngroup and select individual lists.

  1. Check the Children Only boxes. Otherwise, when you import the backup package later, the IdentityView group name will revert to IdentityView 2.n rather than UBM 2.7.
  2. Click OK to save the package.
  3. In the Navigator panel, on the Packages tab, expand the Public folder, right-click the newly created backup package, select Export Package to Bundle, and save the .arb file to the local disk.
  4. Right-click the backup package and select Uninstall Package.

Uninstall IdentityView

Use the following procedure to uninstall the IdentityView package.

  1. In the Packages tab of the Navigator panel, expand the ArcSight Solutions group.
  2. Right-click the IdentityView 2.n package () and select Uninstall Package.
  3. In the Uninstall Packages dialog, click OK.
  4. In the Resolution Options window, choose Skip and then Continue without saving changes.
  5. When the uninstall is finished, click OK.

Import the Backup Active Lists and Session Lists

Skip this section if you chose not to back up the active lists and session lists from the previous version of IdentityView.

  1. On the new UBM package, import and install the backup .arb file that you created in to restore the data from the old active lists and session lists to the new lists.
  2. After successfully importing the backup .arb file, right-click the active lists and session lists in the Navigator panel Resources tab and select Show Entries to display the restored entries.