05-27-2009 06:49 AM - edited 03-09-2019 10:19 PM
How can I archive the entire MARS database?, I can set up archiving but this only archives events as they occur?
05-28-2009 12:01 AM
Archiving in MARS will backup everything. I assume you have it configured pointing to a NFS share?
Have a look at the following table to have an idea about the different data types and their backup interval(s):
Btw, there is a dedicated forum for MARS :)
http://forums.cisco.com/eforum/servlet/NetProf?page=MARS_discussion
Regards
Farrukh
05-28-2009 04:53 AM
But it only appears to back up the new events.. how do I get everything?
05-28-2009 05:53 AM
It will backup everything! However dynamic data BEFORE you enabled archiving is not backed up, as mentioned on the above link:
"When archiving is enabled, dynamic data is written twice: once to the local database and once to the archive server. As such, the dynamic data that is archived includes only the data that is received or generated after you enable the data archive setting. Therefore, we recommend that you enable archiving before configuring your appliance to receive audit events from reporting devices. "
You can do a manual backup using the CLI, as described by the Cisco engineer here:
Regards
Farrukh
P.S I have never tested this method
Discover and save your favorite ideas. Come back to expert answers, step-by-step guides, recent topics, and more.
New here? Get started with these tips. How to use Community New member guide