Visham Rawat

Retaining Archiver post Decommissioning

Discussion created by Visham Rawat on Mar 24, 2020

Quick question – if I need to decommission the entire RSA NetWitness platform / servers, but still need access to Archiver logs for a certain duration, what all components will I have to keep alive?


As per my knowledge, the following will have to be kept alive

1. RSA NetWitness Head Unit

2. Broker

3. Archiver


And the following machines can be safely decommissioned

4. Concentrator

5. ESA

6. Decoder

7. VLC


Is this right? Will the Broker also be needed to be kept alive?