I have a question regarding the functionality of IBM Guardium in the event that the Central Manager goes down. Specifically, I'm looking to understand whether log capture is still operational during this downtime.

1. If the Central Manager is unavailable, are we still able to capture logs from our data sources?
2. If logs continue to be captured, what is the mechanism for this? Will the captured logs be stored locally until the Central Manager is back online?
3. Is there any official IBM documentation or resources that explain the behavior of Guardium during such scenarios?

I appreciate any insights or experiences you can share regarding this situation. Thank you!

Hello Vedvrat,

CM does not capture traffic.
CM is meant for central management (patch management, configuration management, agent upgrade).
If CM is out of order, the abovesaid operations will come to stand-still.
Nothing can be edited in the environment without CM being operational.

Collectors are responsible for traffic capture from the S-TAP/XTAP/UCs.
Collectors (if in good shape) won't affect the traffic capture.

Most of these doubts will be clarified in the Guardium Fundamentals training.

Sincerely,
-Sachin

------------------------------
Sachin Marawar
------------------------------