What is `SapphireIMS_LogAnalyzer` plugin? ----------------------------------------- 1. This plugin is needed to collect and analyze data from various log sources which includes syslogs, eventlogs, snmptraps, netflows and application logs 2. This plugin will install components of log analyzer in SapphireIMS What is required before installing `SapphireIMS_LogAnalyzer-5.0-v1.0-Setup`? -------------------------------------------------------------------------------- 1. SapphireIMS-4.0a setup with SAPP_5000 as minimum patch level 2. 500 GB of free space in hard disk and 16GB of RAM memory Important Note: --------------- If the plugin is getting migrated from SapphireIMS_LogAnalyzer-4.0-v1.0-Setup, it requires data migration script to run manually after SapphireIMS_LogAnalyzer-5.0-v1.0-Setup installation. During migration script running, it is not mandatory to stop SapphireIMS service however, it is mandatory to stop 'SapphireLogAnalyzer' service Path of data migration script: ----------------------------- /Plugins/LogAnalyzer/Upgrades/ DREC09640/ reindex_analyzefields.bat Steps to re index analyzed fields --------------------------------- 1. Stop Loganalyzer service if running. 2. Go to \Plugins\Loganalyzer\bin 3. Execute elasticsearch.bat as Administrator 4. Wait until successfull recovery of all elasticsearch indices. Note : This can be verified by checking the following url eg : http://localhost:9200/_cat/indices?v for no Red in index health. 5. Go to \Plugins\Loganalyzer\upgrade\DREC09640 6. Execute reindex_analyzefields.bat as Administrator and wait for proper termination. Note: Please configure elasticsearch properties by editing batch script, if customized from default. 1. To configure elasticsearch server. Eg: @SET SERVERURL=http://localhost:9200 2. To configure elasticsearch cluster name. Eg: @SET ESCLUSTER=sapphireescluster