Ari System Restore 2.1
- Pavan Raja
- Apr 8, 2025
- 2 min read
Summary:
This document provides a step-by-step guide for reimaging ArcSight appliances using the ArcSight Reimage Appliance (ARI) tool. The steps include downloading and preparing necessary files, setting up a USB stick on a Linux system with XFS capability, downloading and preparing an Express 4.0 image, creating a USB stick for reimage operation, performing the reimage operation via ARI, and finalizing the process by rebooting the appliance.
Details:
To reimaging ArcSight appliances using ARI (ArcSight Reimage Appliance), follow these steps after downloading and preparing the necessary files:
1. **Download USB Stick TGZ Image**:
Access the provided link and download the USB stick image file in tgz format.
Use credentials: username/password – presalesweb/@rcsight.
2. **Prepare USB Stick on Linux System with XFS Capability**:
Extract the downloaded tgz file using `gunzip`.
Run the script `makeDeployer_xfs_ari` followed by your device name (e.g., `./makeDeployer_xfs_ari sdb`).
3. **Download and Prepare Express 4.0 Image**:
Download the ArcSight Express 4.0 image build B1311 from the specified link.
Copy this image to the XFS partition on your prepared USB stick.
4. **Create USB Stick for Reimaging**:
Use the created USB stick to boot the target ArcSight appliance.
Press “Ctrl-r” at the boot screen.
5. **Perform Reimage Operation via ARI**:
Hit “y” to rescan drives.
Select your USB drive and use the right-arrow key.
Choose the ari file and press “ctrl-p”.
Press “f1” to select the ari file, then “f2” to initiate restore.
Confirm with “y” when prompted.
After restoration completes, hit “enter” to proceed and finally press “f12” to reboot the appliance.
This process will help you reinstall or reimage ArcSight appliances using the ARI method as outlined above.
Comments