This section describes how to remove objects related to Kaspersky CyberTrace from ArcSight after Kaspersky CyberTrace is uninstalled. Note that after you have removed these objects, events from Kaspersky CyberTrace persist in ArcSight.
To remove objects related to Kaspersky CyberTrace from ArcSight:
To do this, in ArcSight Console, remove the /All Packages/Public/Kaspersky CyberTrace Connector
package.
In Linux you do this as follows:
/etc/init.d/arc_%service_name% stop
Here %service_name%
is the name of the ArcSight SmartConnector service specified during its installation.
%ConnectorInstallDir%/UninstallerData/Uninstall_ArcSightAgents
Here %ConnectorInstallDir%
is the directory to which the ArcSight SmartConnector was installed.
%ConnectorInstallDir%
directory.In Windows you uninstall the ArcSight SmartConnector service by running the ArcSight SmartConnector uninstallation program.
Do this as follows:
/etc/init.d/arc_%FORWARDING% stop
Here %FORWARDING%
is the name of the ArcSight Forwarding Connector service specified during its installation.
%ConnectorInstallDir%/UninstallerData/Uninstall_ArcSightAgents
Here %ConnectorInstallDir%
is the directory to which the ArcSight Forwarding Connector was installed.
%ConnectorInstallDir%
directory.