IBM QRadar

IBM QRadar

Join this online topic group to communicate across Security product users and IBM experts by sharing advice and best practices with peers and staying up to date regarding product enhancements.


#Security
#QRadar
#SecuringhybridcloudandAI
 View Only
Back to discussions
Expand all | Collapse all

Move Ariel data between QRadar Processor nodes

  • 1.  Move Ariel data between QRadar Processor nodes

    Posted 04/15/19 10:16 AM
    Edited by Phuong Thai 04/15/19 10:17 AM
    support team,

    I would like to move event data in Ariel (i.e. /store/ariel/events/{records,payloads} ) from one QRadar Event Processor to another one within the same deployment. I use  Rsync to sync data from event processor (EP1) to another one (EP2). But on the console <g class="gr_ gr_69 gr-alert gr_spell gr_inline_cards gr_run_anim ContextualSpelling ins-del multiReplace" id="69" data-gr-id="69"><g class="gr_ gr_62 gr-alert gr_gramm gr_inline_cards gr_disable_anim_appear Punctuation only-ins replaceWithoutSep" id="62" data-gr-id="62">qra</g>dar</g> it can't query data on EP2 when EP1 is offline.
    advice me to do that.
    Thanks all



    ------------------------------
    Phuong Thai
    ------------------------------


Related Content