Create a Post
cancel
Showing results for 
Search instead for 
Did you mean: 
Atanas_Atanasov
Explorer

Rule hit counts and migration

Hi all

I would like to ask if anyone knows if it is possible to do a CP merge of the policy and keep the current hits on the rules.

The reason I need to do this is because we are moving from physical to virtual environment while also cleaning the policy. Unfortunately we can only delete a rule that has 0 hits if we are sure that it was not hit in the last 1 year. So when we move the policy to the new environment all hitcounts will be lost.

Another question that I have is: Is there a way to get a list of all rules in the policy with their respective Rule_UIDs? If I can get that I can at least map that to the hit_count_rules_table.sqlite

Any suggestions and answers will be much appreciated

Thanks

Best Regards

0 Kudos
1 Reply
PhoneBoy
Admin
Admin

If you're asking about using cp_merge, no, that does not copy hit counts across.

Also, if you're talking about cp_merge, then you must be using R77.x.

As far as I know, there are only two places to see the rule UIDs:

  • In $FWDIR/conf/rulebases_5_0.fws (where the rules live)
  • In SmartDashboard by right-clicking on the relevant rule:

0 Kudos

Leaderboard

Epsum factorial non deposit quid pro quo hic escorol.

Upcoming Events

    Tue 23 Apr 2024 @ 11:00 AM (EDT)

    East US: What's New in R82

    Thu 25 Apr 2024 @ 11:00 AM (SGT)

    APAC: CPX 2024 Recap

    Tue 30 Apr 2024 @ 03:00 PM (CDT)

    EMEA: CPX 2024 Recap

    Thu 02 May 2024 @ 11:00 AM (SGT)

    APAC: What's new in R82

    Tue 23 Apr 2024 @ 11:00 AM (EDT)

    East US: What's New in R82

    Thu 25 Apr 2024 @ 11:00 AM (SGT)

    APAC: CPX 2024 Recap

    Tue 30 Apr 2024 @ 03:00 PM (CDT)

    EMEA: CPX 2024 Recap

    Thu 02 May 2024 @ 11:00 AM (SGT)

    APAC: What's new in R82
    CheckMates Events