I recently made the jump from MSDE to SQL 2000 and received this bit of instruction from ISS support (which worked for the most part but be careful to delete each sensor you're migrating from the old E.C. before adding it to the new one):
Installation: On the new machine that will house the new Event Collector (EC), run the Workgroup Manager installation and choose a Custom installation. When the next page appears, expand all the choices and unselect everything EXCEPT the Event Collector. Do not select workgroup manager or any databases. In the following steps, you will be asked the location of the databases and you can point to the SQL server at that time. Also select "Allow auto import of keys" and provide the console name and console admin as a public key administrator so that you can set up the Event collector from your console. Event Sources Migration: First shutdown the old EC by right clicking it and choosing Shutdown from the menu. Answer "yes' to the question are you sure you want to shutdown. Next, add the new Event Collector to the console using the Deployment Wizard. This will copy the iss.key license file to the new EC. Complete the deployment wizard to add the sensors you wish to move to the new EC. (You might consider keeping a few sensors on the old EC.) Before restarting the old EC, right click it and choose Properties > Event Sources tab and remove any sensors that were moved to the new EC. With the old EC still shutdown, add the new EC to the active Managed Assets Window and make sure it come up connected active connected. If the sensors reconnect with the new EC, they will also return to connected active connected after about a minute. If they do, remove those sensors from the Event Sources list on the old EC before restarting the old EC. Remember that a sensor can only report to one EC at a time. If a sensor is in the Event Source list for two active ECs, you will get errors. If you do get errors, shutdown one EC and delete the sensor from its list. Good luck! Jeff -----Original Message----- From: glenn marquez [mailto:[EMAIL PROTECTED]] Sent: Monday, November 18, 2002 6:02 PM To: Hayes, Bill; [EMAIL PROTECTED] Subject: Re: [ISSForum] Converting RealSecure 6.5 from MSDE to SQL7 Hello Bill, You can try attaching and detaching process. I've done this before when I migrated my RSDB from MSDE 2000 to SQL 2000 and it worked fine. Regards, glennmarquez --- "Hayes, Bill" <[EMAIL PROTECTED]> wrote: > I am currently running RealSecure Workgroup Manager > 6.6 with a couple of RS 7.0 network sensors with the > remainder being RS 6.5. My console, event manager > and DB are all on the same host. After adding some > new sensors, I am now hitting the MSDE 2 GB limit > over a weekend. This occurs even with trimming out > unnecessary/unlikely attack sigs out of sensor > policies and purging each work day to keep three > days data on hand,. This is further complicated by > the fact that ISS DBMS has suddenly stopped running > scheduled jobs. > > With all of this going on, I'd like to get my data > moved off to a SQL server. Tech support suggested > that I run setup again to transfer the DB assignment > to the SQL server. If I run setup again, will I lose > any updates to my console? > > I'd also like to try and get DBMS back and running > automatically. It does run fine manually. > > Bill... > > ----------------------------------------------- > Bill Hayes > Omaha World-Herald Company > Information Security Specialist > 402.522.2248 > [EMAIL PROTECTED] > ----------------------------------------------- > > _______________________________________________ > ISSForum mailing list > [EMAIL PROTECTED] > > TO UNSUBSCRIBE OR CHANGE YOUR SUBSCRIPTION, go to https://atla-mm1.iss.net/mailman/listinfo ===== Glenn I. Marquez If any man desire to be first, the same shall be last of all, and servant of all- Mark 9:35 __________________________________________________ Do you Yahoo!? Yahoo! Web Hosting - Let the expert host your site http://webhosting.yahoo.com _______________________________________________ ISSForum mailing list [EMAIL PROTECTED] TO UNSUBSCRIBE OR CHANGE YOUR SUBSCRIPTION, go to https://atla-mm1.iss.net/mailman/listinfo _______________________________________________ ISSForum mailing list [EMAIL PROTECTED] TO UNSUBSCRIBE OR CHANGE YOUR SUBSCRIPTION, go to https://atla-mm1.iss.net/mailman/listinfo
