Cisco Support Community
cancel
Showing results for 
Search instead for 
Did you mean: 
Announcements

Welcome to Cisco Support Community. We would love to have your feedback.

For an introduction to the new site, click here. And see here for current known issues.

New Member

How to restore raw events from MARS archive

Hi folks,

We are in a really stupid situation. We've been telling our client that MARS is the best in the breed of monitoring products. Now then when the client need to access the archive dated back about half a year for some investigations we are stuck.

This is a low grade MARS device with a configured archiving for the period of 30 days. All other older archives are stored in pnos directory.

I've been reading this guide on "pnrestore" utility

http://www.cisco.com/en/US/docs/security/security_management/cs-mars/6.0/command/reference/cref1.html#wpxref86306

but I'm still confused.

If I want to restore only dynamic data dated back half a year from pnos archive sizing about 700 MB where can they be found? How can I access them and look for an event from a particular network device?

Please advise if possible?

Eugene

1 REPLY
New Member

Re: How to restore raw events from MARS archive

418
Views
0
Helpful
1
Replies