Ari System Restore 4.1

Summary:

This document outlines how to reimage ArcSight appliances using ARI (ArcSight ReImage) by following a series of steps on a Linux system. Firstly, prepare a USB stick with XFS capability by downloading and extracting an image file from a `.gz` format, then use the command `./makeDeployer_xfs_ari ` to create a deployment tool on the USB stick. Copy necessary image files to the XFS partition of the USB stick. Boot the ArcSight appliance using this USB stick and initiate the reimage process by pressing `Ctrl-r` during the BIOS screen, selecting the USB drive, choosing the ARI file, and following specific command sequences to confirm and proceed with the restore.

Details:

To reimage ArcSight appliances using ARI (ArcSight ReImage), follow these steps after creating a USB stick with XFS capability on a Linux system: 1. **Prepare the USB Stick:**

• Create a USB stick with XFS capability by downloading and extracting an image file, typically in `.gz` format.

• Use the command `./makeDeployer_xfs_ari ` to create the deployment tool on the USB stick, replacing `` with your USB drive identifier (e.g., `sdb`).

2. **Copy Image Files:**

• Copy the image files to the XFS partition on the USB stick.

3. **Boot and Reimage the Appliance:**

• Use the created USB stick to boot the ArcSight appliance.

• Upon reaching the BIOS screen, press `Ctrl-r` to initiate the reimage process.

• Confirm that drives are rescanned by hitting “y”.

• Select your USB drive and proceed by clicking the right-arrow.

• Choose the ARI file and press `ctrl-p`.

• Input the command sequence: hit “f1” to select the ARI file, then “f2” to initiate the restore process. Confirm with “y”.

• Monitor the progress; ensure that "AI" is displayed in the upper left corner of the screen during the restoration.

• Once the restore is complete, press “enter” to proceed and then “f12” to reboot the appliance.

Disclaimer:

The content in this post is for informational and educational purposes only. It may reference technologies, configurations, or products that are outdated or no longer supported. If there are any comments or feedback, kindly leave a message and will be responded.