Archived partitions can be restored to online status. This may be helpful, for example, to allow comparison between older and newer incident patterns. Up to 4 partitions (approximately
1 year of records) can be restored.
To restore incident partitions from their archives:
Steps
-
Go to the page in the Data Security module of the Forcepoint Security Manager.
- Use the check boxes to select one or more partitions.
- Click Restore in the toolbar at the top of the content pane.
A “Selected archive partitions were successfully restored” confirmation message is displayed.
-
Click OK.
The Status line for the restored partitions indicates that they are now online.
Note:
Before restoring an archive, the repository checks to see how much disk space is consumed by the restore operation. If restoration exceeds 95 percent of the allowed disk
space, it cannot be performed.
After restoring a partition, delete the archived records from the archive folder.