we are currently working with our client on a SIEM audit and we need to obtain specific logs from them. The client exported the events using LSMAINT and provided us with the outputs. However, when we try to perform the offline restore using LSMAINT, the task always fails and we don't seem to find any error.
Does anyone know what could be the problem?
For the restore we use following command:
lsmaint -offLineRestore -time 20130101 20131231 -storagelocation winevent_nic
Thank you in advance!