Visham Rawat

Retaining Archiver post Decommissioning

Discussion created by Visham Rawat on Mar 24, 2020

Quick question – if I need to decommission the entire RSA NetWitness platform / servers, but still need access to Archiver logs for a certain duration, what all components will I have to keep alive?

 

As per my knowledge, the following will have to be kept alive

1. RSA NetWitness Head Unit

2. Broker

3. Archiver

 

And the following machines can be safely decommissioned

4. Concentrator

5. ESA

6. Decoder

7. VLC

 

Is this right? Will the Broker also be needed to be kept alive?

Outcomes