RSA Admin

Lsmaint offline backup/restore not working

Discussion created by RSA Admin Employee on Aug 8, 2014
Latest reply on Sep 2, 2014 by Paul Gilder

Hi everyone,


we are currently working with our client on a SIEM audit and we need to obtain specific logs from them. The client exported the events using LSMAINT and provided us with the outputs. However, when we try to perform the offline restore using LSMAINT, the task always fails and we don't seem to find any error.


Does anyone know what could be the problem?


For the restore we use following command:

lsmaint -offLineRestore -time 20130101 20131231 -storagelocation winevent_nic


Thank you in advance!