Cleaning Up the EFS Directory (AWS)

After installing the ArcSight Database and upgrading the Platform, you must clean up the EFS directory to remove instances of existing configuration data before you begin a fresh install.

The ArcSight Database is a separate installation and is not included in the platform upgrade. For more information, see Installing the Database in AWS.
You must backup necessary configuration data like custom dashboards, searches etc. to avoid data loss on account of the clean up. For more information, see Backing Up and Restoring Configuration Data for Deployed Capabilities.

To clean up the EFS directory, connect to one of your database nodes and run the following commands:

  1. Remove the "Reporting" directory under EFS:

    rm -rf /opt/arcsight-nfs/arcsight-volume/reporting

  2. Remove the "rethinkdb" directory under EFS:

    rm -rf /opt/arcsight-nfs/arcsight-volume/fusiondb/search/rethinkdb

  3. Restart the pods that require rethinkdb:

    kubectl get pods \
-n $( kubectl get namespaces | grep arcsight | cut -d ' ' -f1 ) \
--no-headers=true | awk '/fusion/{print $1}'| xargs

  4. Delete the Fusion pods: 

    NSP=$( kubectl get namespaces | grep arcsight | cut -d ' ' -f1 ) 
kubectl delete -n  $NSP pod