Go to the table of contents Go to the previous page You are at the end of the document View or print as PDF
Archiving Forcepoint DLP Incident Data : Archive formatting and restoration
Archive formatting and restoration
Archived records are stored in a subfolder of the archive folder. They can be restored using their record ID number.
Archive record format
When incident records are archived, they have the same disk layout as when in the database. The archived records are stored in a subfolder of the archive folder. The folder name is in the following format: FR-ARC-YYYYMMDD-yyyymmdd-xxx[-id]
*
*
*
*
Note that archives are stored at the resolution of one full day.
Restoring an archive
Manually created archives can be restored using the archiving record ID number:
1.
2.
Go to the Settings > General > Archive Partitions page.
3.
4.
Click Restore in the toolbar at the top of the page.
5.
Click OK in the confirmation dialog box.
Before restoring an archive, the system checks the total disk space needed. If the required space exceeds 95 percent of the maximum allotted space, the action is canceled.
When the restore operation is successfully completed, the records are deleted from the archive folder. A maximum of 4 restored archives can be online at the same time. Restored archives are not counted toward the maximum 8 online partitions or 12 archived partitions.
See Forcepoint DLP Administrator Help for more information.

Go to the table of contents Go to the previous page You are at the end of the document View or print as PDF
Archiving Forcepoint DLP Incident Data : Archive formatting and restoration
Copyright 2018 Forcepoint. All rights reserved.