...\lsnode\obsolete-data - safe to delete?

[EricLevin]

Is it safe to delete the contents of the ...\lsnode\obsolete-data folder?  I cannot seem to find any documentation on this...

I see antoher poster is deleteing it.  Just looking for some word from RSA on this.

[RSAAdmin]

Yes, the items below that folder are little more than logs that were removed from enVision's "sight" by:

1) Selecting an alternate source device type for an event source within enVision

2) Deleting a device from the Manage Monitored Devices screen

Deleting that data does no harm to the enVision system.

[BalazsImre]

Hi, is there any way to export logs from obsolete folders to get back the raw logs in csv?

Thanks,

Balazs

[RSAAdmin]

You would need to move the obsolete folder to a known device with the same IP then extract it

[RSAAdmin]

Do I need lsmaint  to delete obsolete-data?

Thank you

[PatrickHayes]

Once data is moved to .../obsolete-data it is no longer managed by enVision. Just remove the files using your preferred method.

[GaneshSonawane]

Is it possible to retrive the data by command line from

obsolete-data directory. As we have deleted the device and we need to retriew the logs from that server for urgent issue.

[RobParris]

You can put the logs into a valid directory but I don't think you would have access to the logs via reporting, etc.  You wold likely need to a rebuild of the device data to get the data accessible via enVision.

[GaneshSonawane]

Thanks Kumo

So you mean I can get the old evnets by using the lsdata command...right. ?  I f I am wrong then pelase correct me.