This website uses cookies. By clicking Accept, you consent to the use of cookies. Click Here to learn more about how we use cookies.
Accept
Reject

NetWitness Community

  • Home
  • Products
    • NetWitness Platform
      • Advisories
      • Documentation
        • Platform Documentation
        • Known Issues
        • Security Fixes
        • Hardware Documentation
        • Threat Content
        • Unified Data Model
        • Videos
      • Downloads
      • Integrations
      • Knowledge Base
    • NetWitness Cloud SIEM
      • Advisories
      • Documentation
      • Knowledge Base
    • NetWitness Detect AI
      • Advisories
      • Documentation
      • Knowledge Base
    • NetWitness Investigator
    • NetWitness Orchestrator
      • Advisories
      • Documentation
      • Knowledge Base
      • Legacy NetWitness Orchestrator
        • Advisories
        • Documentation
  • Community
    • Blog
    • Discussions
    • Events
    • Idea Exchange
  • Support
    • Case Portal
      • Create New Case
      • View My Cases
      • View My Team's Cases
    • Community Support
      • Getting Started
      • News & Announcements
      • Community Support Forum
      • Community Support Articles
    • Product Life Cycle
    • Support Information
    • General Security Advisories
  • Training
    • Blog
    • Certification Program
    • Course Catalog
    • New Product Readiness
    • On-Demand Subscriptions
    • Student Resources
    • Upcoming Events
  • Technology Partners
  • Trust Center
Sign InRegister Now
cancel
Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
Showing results for 
Search instead for 
Did you mean: 
NetWitness Discussions
Announcement Banner

Users are unable to open Netwitness Support Cases via email. Please open support cases via portal or by phone

View Details
  • NetWitness Community
  • Discussions
  • External Backup Host for Upgrade to 11.3
  • Options
    • Subscribe to RSS Feed
    • Mark Topic as New
    • Mark Topic as Read
    • Float this Topic for Current User
    • Bookmark
    • Subscribe
    • Mute
    • Printer Friendly Page

External Backup Host for Upgrade to 11.3

VishamRawat
VishamRawat Beginner
Beginner
Options
  • Mark as New
  • Bookmark
  • Subscribe
  • Mute
  • Subscribe to RSS Feed
  • Permalink
  • Print
  • Email to a Friend
  • Report Inappropriate Content

‎2019-08-30 11:14 AM

Is there an alternative to setting up an external CentOS backup host for the backup procedure prior to migration to 11.3?

 

I was informed that we can use the SA Head Unit as the backup host. Can this be done?

If yes - is there any specific considerations not explicitly listed for such a scenario, that I should take note of?

 

Also, it says -

Ensure that the host names for the systems to be backed up are resolvable on the backup host machine,

either by DNS or listed in the /etc/hosts file.

 

Should my hostname in itself be resolvable, or will FQDN be fine? As of now, the FQDN is resolvable.

  • 11.3
  • backup
  • Community Thread
  • Discussion
  • Forum Thread
  • NetWitness
  • netwitness-logs
  • NW
  • NWP
  • RSA NetWitness
  • RSA NetWitness Platform
  • security_analytics
0 Likes
Share
Reply
  • All forum topics
  • Previous Topic
  • Next Topic
6 REPLIES 6

AaronMartin2
Employee AaronMartin2
Employee
Options
  • Mark as New
  • Bookmark
  • Subscribe
  • Mute
  • Subscribe to RSS Feed
  • Permalink
  • Print
  • Email to a Friend
  • Report Inappropriate Content

‎2019-08-30 11:30 AM

So the script is tested and supported on a CentOS 6 host so you can run it on any CentOS 6 host. The reason we recommend another host is simply so that you can have the backup files on another device should something fail on the upgrade on the Admin Server, for instance. If you try to reimage a physical host for a second time, you may lose that preserved partition that we have in the case of physical upgrades.

 

The idea is simply that you have backups of your backups. If you take the backups you create on the Admin Server and store them somewhere else in case of the worst, it will be fine.

 

And just like John Snider mentioned in your other question,should the worse happen or you are not attaching the drive that has the backup on it, you can SCP the backup over if you go ahead and configure the networking ahead of time.

https://community.rsa.com/message/940778?commentID=940778&et=watches.email.thread#comment-940778 

1 Like
Share
Reply

SeanGriesheimer
Employee SeanGriesheimer
Employee
Options
  • Mark as New
  • Bookmark
  • Subscribe
  • Mute
  • Subscribe to RSS Feed
  • Permalink
  • Print
  • Email to a Friend
  • Report Inappropriate Content

‎2019-08-30 11:31 AM

Absolutely! You'll need some space to store the backup information on the head unit, but that shouldn't be a problem unless you have an abnormally large amount of data on that appliance. If you run the script with the "-d" switch, it will check every appliance for space before the scripts run. Using the "-D" (capital D) will run a more comprehensive disk check, but only bother with that if you've run with the "-d" test and it fails.

 

I recommend that after you've copied the scripts to the head unit (create the /var/netwitness/database/nw-backup/ folder and put the scripts there), run the get-all-systems.sh script, then run ssh-propagage.sh script, and finally run nw-backup.sh by itself without any switches. That will give you all of the options you can use.

1 Like
Share
Reply

VishamRawat
VishamRawat Beginner
Beginner
In response to AaronMartin2
Options
  • Mark as New
  • Bookmark
  • Subscribe
  • Mute
  • Subscribe to RSS Feed
  • Permalink
  • Print
  • Email to a Friend
  • Report Inappropriate Content

‎2019-08-30 11:43 AM

Yes, I guess I'll run the scripts from the SA head unit and SCP them to a local windows machine, for redundancy. Hope that should be fine!

0 Likes
Share
Reply

VishamRawat
VishamRawat Beginner
Beginner
In response to SeanGriesheimer
Options
  • Mark as New
  • Bookmark
  • Subscribe
  • Mute
  • Subscribe to RSS Feed
  • Permalink
  • Print
  • Email to a Friend
  • Report Inappropriate Content

‎2019-08-30 11:44 AM

Thanks Sean!

Quick question - how much is the backup size on average from a machine? Like I've got 18 servers, so how much should I be expecting approximately?

0 Likes
Share
Reply

SeanGriesheimer
Employee SeanGriesheimer
Employee
In response to VishamRawat
Options
  • Mark as New
  • Bookmark
  • Subscribe
  • Mute
  • Subscribe to RSS Feed
  • Permalink
  • Print
  • Email to a Friend
  • Report Inappropriate Content

‎2019-08-30 11:46 AM

That is different for every environment. Run the script with "-d" and it will give you estimates.

0 Likes
Share
Reply

VishamRawat
VishamRawat Beginner
Beginner
In response to SeanGriesheimer
Options
  • Mark as New
  • Bookmark
  • Subscribe
  • Mute
  • Subscribe to RSS Feed
  • Permalink
  • Print
  • Email to a Friend
  • Report Inappropriate Content

‎2019-08-30 11:58 AM

Noted. Oh, and I should I be able to resolve hostnames in themselves or will FQDN do?

0 Likes
Share
Reply
Powered by Khoros
  • Blog
  • Events
  • Discussions
  • Idea Exchange
  • Knowledge Base
  • Case Portal
  • Community Support
  • Product Life Cycle
  • Support Information
  • About the Community
  • Terms & Conditions
  • Privacy Statement
  • Acceptable Use Policy
  • Employee Login
© 2022 RSA Security LLC or its affiliates. All rights reserved.