Skip to main content

Cybereason is now LevelBlue. Proven endpoint protection, now with greater scale and expanded capabilities. Learn More

Loading...
Loading...

HOWTO: Removing and Replacing the APEDB

Expand / Collapse


This article applies to:

  • DLP Protect Email

Question:

  • How do I remove and replace the APE DB?

Background:

The Console shows errors in /var/log/messages about the APEDB or the APESVC that indicate the service cannot start.

Procedure:

  1. Stop services. On the Console, enter the following commands:

    service namesvc stop
    service apesvc stop
    service cfgsvc stop
  2. Delete the files related to the database:

    rm -rf /opt/vericept/var/apedb/*
    rm -rf /opt/vericept/var/aperesults/*
    rm -f /opt/vericept/var/ns.db
    rm -f /opt/vericept/var/tmp/cfg_ior_repository.txt
    rm -f /opt/vericept/var/tmp/interceptor_ref.cache
  3. Start the services that were stopped and restart the Vericept service:

    service namesvc start
    service apesvc start
    service cfgsvc start
    service vericept restart
  4. On each Protect device, restart services:

    service ecsd restart
    service cachemgr restart
    service vericept restart
  5. Test the Reconsider function.

Notes:

  • If you have questions or concerns about this procedure, contact Trustwave TAC.
  • This process often leaves Events in an unexpected state, and they cannot be acted on or archived. If this problem occurs, contact TAC for assistance.

To contact LevelBlue about this article or to request support:


Rate this Article:
     

Add Your Comments


Comment submission is disabled for anonymous users.
Please send feedback to Trustwave Technical Support or the Webmaster
.