Reinstalling the Platform

If you uninstalled the Platform and plan to reinstall it in the same cluster along with the deployed capabilities, perform the following steps before reinstalling Platform and Intelligence:

1. Launch a terminal session and as a root user, log in to the node where NFS is present.

2. Delete the NFS directory:

   rm -rf /opt/arcsight-nfs

3. Launch a terminal session and then log in to the node where the Kubernetes hostpath is present.

4. Navigate to the following directory:

   cd /opt/arcsight/

5. Delete the following directory:

   rm -rf k8s-hostpath-volume

6. Repeat Step 4 and Step 5 on all OMT worker nodes.

7. Launch a terminal session and then log in to a database node.

8. Navigate to the following directory:

   cd /[database_install_directory]/

9. Stop the Kafka Scheduler:

   ./kafka_scheduler stop

10. (Conditional) If you have the ArcSight database installed), complete the following steps as a dbadmin user:

    1. Execute the following command and specify your dbadmin password:

       /opt/vertica/bin/vsql

Password:<password>

    2. Execute the following command to delete the data in the default_secops_adm.events table:

       DELETE FROM default_secops_adm.events;

    3. Execute the following command to delete the default_secops_intelligence schema:

       drop schema default_secops_intelligence cascade;

11. Continue with reinstalling the Platform and deploying the capabilities. Complete one of the following actions:

    1. Deploy the capabilities manually. For more information, see Performing a Manual Deployment.

    2. Deploy the capabilities by using the ArcSight Platform Installer.