securityanalytics-backuprestore script

[MohammadEnnab1]

Dear All;

I tried to test RSA backup script which published officially, the backup taken for the SA configuration and we need to restore the same configuration on different SA machine. but the restore process failed while its a different host with different IP and hostname.

As mentioned on the backup document, there are two conditions for the restore process the new host must have the same hostname and IP address.

Any one can help me to ensure if the current script can work to restore configuration on different host while the two hosts in a production enviroment to reduce time and effort to configure new SA from scratch.

[JohnKisner]

Mohammad,

Currently the script is designed to restore a backup to an existing appliance, such as for a RMA of that appliance. It isn't really designed to be a migration tool between two different systems with different IP addresses and names. You would probably need to remove the new SA UI server from the network and change its host name and IP address to reflect the system the backup was originally taken from. Once that is done run the restore and finally change the host name and IP address back to what the second SA UI server was supposed to be. However you can't just change these items you would need to use something like this: https://community.rsa.com/docs/DOC-64284 This link is for how to change them on a 10.6.2 system but there are instructions for 10.6.3 and 10.6.4. 

Remember if you try this you do so at your own risk as this is not a tested and qualified use of the backup/restore script. If you get into a bind and things don't seem to work, you may have to reimage the second SA UI server to get it back to a working state and then do the configuration changes manually.

I hope this helps.

[MohammadEnnab1]

Hi John;

Thanks for your guides.

We could not change the SA-VM Hostname and IP address because all of them in production enviroment. we were thinking to save time in configure settings for each SA manually.

Based on your feedback so we will proceed with it manually.

[MohammadEnnab1]

Dears;

Beside backup/restore script which used to backup configuration settings only for the appliance. is there any procedure to backup data and restore them after re-image appliance.

[JohnKisner]

If these machines are virtual then all you would need to do is transfer the data partitions from one virtual machine to another. If these are physical machines and not hybrids you can just disconnect the DAC from the appliance while you reimage. Once the reimage is completed you connect the DAC back and you have all your old data.

If it is a hybrid the only way you can keep the data is to copy the data from the hybrid partitions to another location and then copy it back. You do not have to export the data from the database files. All you need to do is make sure you have all of the same database files you started with when you are done.

[MohammadEnnab1]

Hi John;

There is two hybrid appliances and there is no DAC connected. there is archiver connected with AIO, the whole log decoders for (hybrid and AIO) received the same events (duplicate) from two virtual VLC's.

so after reimage i need to ensure that there is no lost of data as well as of configuration.