Log Manager to JSA Migration
Like Log Manager, JSA collects and analyzes data. Migrate Log Manager system to JSA to enable security intelligence such as real-time alerting, and vulnerability scanning.
All rule changes including custom rules, saved searches, and reports are reset to the defaults that are in JSA. Your changes to rules, saved searches, and reports are lost. Since versions change between the two products, a backup and restore do not preserve your configured rules.
Follow these guidelines to maintain your configurations:
Note any rules, searches, and reports that you want to keep, and then re-create them after the migration
Export rules, searches, and reports that you want to maintain by using the content management tool
The content management tool restores settings between deployments.
After you migrate, the following settings are maintained:
Log sources and log source extensions
Retention settings and forwarding rules
User configuration, but limited settings for a user in Log Manager can require updated user settings in JSA
Network hierarchy and log source groups