This article provides information and process about upgrading to GFI EventsManager 2012.
This article does not refer to the latest version of the product. If you want to upgrade to the latest version, please refer to https://upgrade.gfi.com/?product=gfti-eventsmanager.
Please make sure to read through this article in its entirety in order to prepare yourself for the upgrade to GFI EventsManager 2012. There are major enhancements in the backend database and reporting that requires understanding these considerations before upgrading and successfully maintaining your configuration and data.
- If you are using a version older than GFI EventsManager 2011, it will require to first upgrade to GFI EventsManager 2011 before upgrading to GFI EventsManager 2012.
- Custom reports and configuration settings from the GFI EventsManager 2011 ReportPack cannot be migrated to GFI EventsManager 2012 reporting.
Important pre-upgrade considerations:
- Ensure that the server meets the increased minimum system requirements of GFI EventsManager 2012:
- Processor: 2.5GHz or higher, dual-core or more
- RAM: 3GB
- Hard Disk: At least 10 GB of available disk space (plus additional space for event data storage)
- A new license key is needed for GFI EventsManager 2012. A valid software maintenance agreement entitles you to upgrade the GFI EventsManager 2011 license key without further costs. License keys can be managed via the customer area: Upgrading License Key.
- When doing an in-place upgrade, importing configuration and event data is only supported when moving from GFI EventsManager 2011.
- Reporting functionality is fully integrated into the GFI EventsManager 2012 Console and no longer uses a separate ReportPack.
- Note: Custom reports and configuration settings from the GFI EventsManager 2011 ReportPack cannot be migrated to GFI EventsManager 2012 reporting.
- GFI EventsManager 2012 no longer supports SQL as a backend database but makes use of its own file-based storage engine. If event data was stored on another server before (SQL being installed remotely) the GFI EventsManager host might not have sufficient disk space. If this is the case, it is advisable to add more disk space to the partition where GFI EventsManager is installed.
- The folder in which event data is stored is located under the GFI EventsManager 2012 program directory chosen during a new installation or an upgrade.
- If installing the GFI EventsManager application on the system drive, consider moving the file storage folder after the installation to another drive to prevent the system hard disk from becoming full.
- If old event data needs to be imported, it is recommended not to use the update wizard but use the database operations after the installation process is complete.
In-place upgrade procedure:
- Ensure to have a recent backup of the system. Refer to GFI EventsManager Backup instructions for more information.
- Disable any anti-virus software completely during the upgrade.
- IMPORTANT: Download GFI EventsManager 2012 Gold (build 20111130) from http://ftp.gfisoftware.com/support/ESM/Software/EventsManager_20111130.exe. Do not upgrade to EventsManager 2012 SR1 directly.
- Run the installer.
- The installer will install prerequisites if needed (e.g. the .NET Framework 4 and SQL components).
- Confirm the uninstall of GFI EventsManager 2011 when asked such a dialog appears twice. If either of the dialogs is not confirmed, the installation will quit.
Note: The configuration data of GFI EventsManager 2011 will not be deleted but copied to the new installation folder as: "..\data_old". This will be used later to retain your configurations.
- During the installation of GFI EventsManager 2012, choose the new installation path (different from your previous install), enter your GFI license key, and specify a valid username and password under which the services will run (preferably a domain admin account).
- IMPORTANT: After the installation, the upgrade wizard will start automatically. Leave the window open and go to the next tab.
- If you want to start over with a fresh installation, click Skip import.
- If you click Import, general settings (like event source) will be imported plus the selection that you ticked.
- It is recommended to skip the import of event data from the old main and backup database via the wizard as this it will take a considerable amount of time (see NOTES A section below).
- Download the Leave patch.
- Extract the file ImportSettings.exe in the EventsManager install folder (e.g.
C:\Program Files (x86)\GFI\EventsManager2013) overwriting the existing one. Back up the existing files first.
- Complete the import process started in step 2.
- Once the update wizard is completed, the upgrade process will finish.
- Ensure to add the new installation folder as an exception to the anti-virus software.
- The import will process about 1000 records per second. With this benchmark note, a 20 GB database will take about 3 hours to complete.
- This process speed was observed on a quad-core system importing from a remote SQL server connected via 1Gbps connection. The speed will vary depending on the environment.
- The import can be performed after the update via the Management Console; Configuration tab, Options, Database Operations. Also, you can run UpgradeWizard.exe from the install directory of GFI EventsManager 2012.
1.2 This article has a duplicate that should be archived:
2.2 Changed header names based on Confluence Style Guide
2.3 Spelled out the acronym for clarity
2.4 Changed the title to Upgrading to GFI EventsManager 2012
3.1 Changed labels to (AQI, )
3.2 No hyperlinks, images, and attachments in this article
4.1 Formatted headers to H1
4.2 Corrected some grammatical errors
4.3 Formatted all keywords to bold
4.4 No source code lines, queries, and scripts in this article
4.5 Neither bullet points nor numbered list were used in this article
EndPointSecurity :: Agent :: Communication gfi_comp_endpointsecurity_agent_communication
EndPointSecurity :: Agent :: Deployment gfi_comp_endpointsecurity_agent_deployment
EndPointSecurity :: Agent :: Services gfi_comp_endpointsecurity_agent_services
EndPointSecurity :: Agent :: System requirements gfi_comp_endpointsecurity_agent_system_requirements
EndPointSecurity :: Agent :: Temporary access tool gfi_comp_endpointsecurity_agent_temporary_access_tool
EndPointSecurity :: Agent :: Uninstall gfi_comp_endpointsecurity_agent_uninstall
EndPointSecurity :: Database Backend :: SQL gfi_comp_endpointsecurity_database_backend_sql
EndPointSecurity :: Management Console :: Alerting gfi_comp_endpointsecurity_management_console_alerting
EndPointSecurity :: Management Console :: Computer Discovery gfi_comp_endpointsecurity_management_console_computer_discovery
EndPointSecurity :: Management Console :: Device Discovery gfi_comp_endpointsecurity_management_console_device_discovery
EndPointSecurity :: Management Console :: First time setup gfi_comp_endpointsecurity_management_console_first_time_setup
EndPointSecurity :: Management Console :: Licensing gfi_comp_endpointsecurity_management_console_licensing
EndPointSecurity :: Management Console :: Migration gfi_comp_endpointsecurity_management_console_migration
EndPointSecurity :: Management Console :: Permissions gfi_comp_endpointsecurity_management_console_permissions
EndPointSecurity :: Management Console :: Reporting gfi_comp_endpointsecurity_management_console_reporting
EndPointSecurity :: Management Console :: Services gfi_comp_endpointsecurity_management_console_services
EndPointSecurity :: Management Console :: System requirements gfi_comp_endpointsecurity_management_console_system_requirements
EndPointSecurity :: Management Console :: Upgrade gfi_comp_endpointsecurity_management_console_upgrade
EndPointSecurity :: Protection Policy :: Blacklist gfi_comp_endpointsecurity_protection_policy_blacklist
EndPointSecurity :: Protection Policy :: Content Awareness gfi_comp_endpointsecurity_protection_policy_content_awareness
EndPointSecurity :: Protection Policy :: Controlled Devices gfi_comp_endpointsecurity_protection_policy_controlled_devices
EndPointSecurity :: Protection Policy :: Customization gfi_comp_endpointsecurity_protection_policy_customization
EndPointSecurity :: Protection Policy :: Encryption gfi_comp_endpointsecurity_protection_policy_encryption
EndPointSecurity :: Protection Policy :: Event logging gfi_comp_endpointsecurity_protection_policy_event_logging
EndPointSecurity :: Protection Policy :: file-type filter gfi_comp_endpointsecurity_protection_policy_file_type_filter
EndPointSecurity :: Protection Policy :: How to configure gfi_comp_endpointsecurity_protection_policy_how_to_configure
EndPointSecurity :: Protection Policy :: Permissions gfi_comp_endpointsecurity_protection_policy_permissions
EndPointSecurity :: Protection Policy :: Whitelist gfi_comp_endpointsecurity_protection_policy_whitel
EventsManager::Console :: Help with Installation/Setup gfi_comp_eventsmanager_console_help_with_installation_setup
EventsManager::Console :: Invalid License Key gfi_comp_eventsmanager_console_invalid_license_key
EventsManager::Console :: Licensing gfi_comp_eventsmanager_console_licensing
EventsManager::Console :: Migration gfi_comp_eventsmanager_console_migration
EventsManager::Console :: Product Enhancement gfi_comp_eventsmanager_console_product_enhancement
EventsManager::Console :: Services gfi_comp_eventsmanager_console_services
EventsManager::Database Maintenance :: Database Operations gfi_comp_eventsmanager_database_maintenance_database_operations
EventsManager::Database Maintenance :: Maintenance Jobs gfi_comp_eventsmanager_database_maintenance_maintenance_jobs
EventsManager::Database Maintenance :: Managing the database backend gfi_comp_eventsmanager_database_maintenance_managing_the_database_backend
EventsManager::Event Collection :: auditing on files, folders, and registry keys gfi_comp_eventsmanager_event_collection_auditing_on_files_folders_and_registry_keys
EventsManager::Event Collection :: Custom Log gfi_comp_eventsmanager_event_collection_custom_log
EventsManager::Event Collection :: Network Permissions gfi_comp_eventsmanager_event_collection_network_permissions
EventsManager::Event Collection :: SNMP Trap Messages gfi_comp_eventsmanager_event_collection_snmp_trap_messages
EventsManager::Event Collection :: Syslogs gfi_comp_eventsmanager_event_collection_syslogs
EventsManager::Event Collection :: Text Logs gfi_comp_eventsmanager_event_collection_text_logs
EventsManager::Event Collection :: Windows event logs gfi_comp_eventsmanager_event_collection_windows_event_logs
EventsManager::Event Processing :: Active Monitoring gfi_comp_eventsmanager_event_processing_active_monitoring
EventsManager::Event Processing :: Alerting gfi_comp_eventsmanager_event_processing_alerting
EventsManager::Event Processing :: Event Sources gfi_comp_eventsmanager_event_processing_event_sources
EventsManager::Event Processing :: Events Browser gfi_comp_eventsmanager_event_processing_events_browser
EventsManager::Event Processing :: Processing Rules gfi_comp_eventsmanager_event_processing_processing_rules
EventsManager::Event Processing :: Reporting gfi_comp_eventsmanager_event_processing_reporting
EventsManager::Licensing :: GFI Prime gfi_comp_eventsmanager_licensing_gfi_prime
EventsManager::Licensing :: Sales gfi_comp_eventsmanager_licensing_sales