How to restore raw events from MARS archive

Unanswered Question
Dec 9th, 2009

Hi folks,

We are in a really stupid situation. We've been telling our client that MARS is the best in the breed of monitoring products. Now then when the client need to access the archive dated back about half a year for some investigations we are stuck.

This is a low grade MARS device with a configured archiving for the period of 30 days. All other older archives are stored in pnos directory.

I've been reading this guide on "pnrestore" utility

http://www.cisco.com/en/US/docs/security/security_management/cs-mars/6.0/command/reference/cref1.html#wpxref86306

but I'm still confused.

If I want to restore only dynamic data dated back half a year from pnos archive sizing about 700 MB where can they be found? How can I access them and look for an event from a particular network device?

Please advise if possible?

Eugene

I have this problem too.
0 votes
  • 1
  • 2
  • 3
  • 4
  • 5
Overall Rating: 0 (0 ratings)
Loading.

Actions

This Discussion