Instead of installing a new server, can one of the existing servers be changed from one type (ie, Monitor, Prevent, Endpoint Server, Discover) to another type.
Changing the Detection Server from one type to another is not supported.
The problem is that when the installer runs and a Detection Server type is selected, the settings of the server are tuned for the intended function. Changing the server type does not alter the default settings. Although the server may function in the new state, it is not in an optimum configuration, and is likely to experience problems such as the queuing of incidents or out of memory errors.Also see KB 47068.