Upgrading a Dedicated Log Server from R80.10 and lower with CPUSE

In a CPUSE upgrade scenario, you perform the upgrade procedure on the same dedicated Log Server or Endpoint Policy Server.

Notes: To upgrade from R80.20 and higher, see Upgrading a Security Management Server or Log Server from R80.20 and higher with CPUSE. To upgrade a dedicated SmartEvent Server, see Upgrading a Dedicated SmartEvent Server from R80.10 and lower with CPUSE. This upgrade method is supported only for servers that already run on Gaia Operating System.

Important - Before you upgrade a dedicated Log Server: Step Instructions 1 Back up your current configuration (see Backing Up and Restoring). 2 See the Upgrade Options and Prerequisites. 3 Before you upgrade a dedicated Log Server, you must upgrade the applicable Management Server that manages it. 4 You must close all GUI clients (SmartConsole applications) connected to the Log Server.

Procedure:

1. Upgrade the dedicated Log Server with CPUSE

   See Installing Software Packages on Gaia and follow the applicable action plan.

2. Update the version of the Log Server object

   Step	Instructions
   1	Connect with SmartConsole to the R80.40 Security Management Server that manages the dedicated Log Server.
   2	From the left navigation panel, click Gateways & Servers.
   3	Open the object of the dedicated Log Server.
   4	From the left tree, click General Properties.
   5	In the Platform section > in the Version field, select R80.40.
   6	Click OK.

3. Install the management database

   Step	Instructions
   1	Connect with SmartConsole to the R80.40 Security Management Server that manages the dedicated Log Server.
   2	In the top left corner, click Menu > Install database.
   3	Select all objects.
   4	Click Install.
   5	Click OK.

4. Install the Event Policy on the dedicated Log Server

   Important - This step applies only if the SmartEvent Correlation Unit Software Blade is enabled on the dedicated R80.40 Log Server.

   Step	Instructions
   1	Connect with the SmartConsole to the R80.40 Log Server.
   2	In the SmartConsole, from the left navigation panel, click Logs & Monitor.
   3	At the top, click + to open a new tab.
   4	In the bottom left corner, in the External Apps section, click SmartEvent Settings & Policy. The Legacy SmartEvent client opens.
   5	In the top left corner, click Menu > Actions > Install Event Policy.
   6	Confirm.
   7	Wait for these messages to appear: SmartEvent Policy Installer installation complete SmartEvent Policy Installer installation succeeded
   8	Click Close.
   9	Close the Legacy SmartEvent client.

5. Test the functionality on the dedicated Log Server

   Step	Instructions
   1	Connect with SmartConsole to the dedicated R80.40 Log Server.
   2	Make sure the management database and configuration were upgraded correctly.

6. Reconfigure the Log Exporter

   Step	Instructions
   1	Connect to the command line on the server.
   2	Log in to the Expert mode.
   3	Restore the Log Exporter configuration as described in sk127653.
   4	Reconfigure the Log Exporter: cp_log_export reconf
   5	Restart the Log Exporter: cp_log_export restart

   For more information, see the R80.40 Logging and Monitoring Administration Guide > Chapter Log Exporter.

7. Test the functionality on the R80.40 Security Management Server

   Step	Instructions
   1	Connect with SmartConsole to the R80.40 Security Management Server that manages the dedicated Log Server.
   2	Make sure the logging works as expected.