IBM QRadar

IBM QRadar

Join this online topic group to communicate across Security product users and IBM experts by sharing advice and best practices with peers and staying up to date regarding product enhancements.


#Security
#QRadar
#SecuringhybridcloudandAI
 View Only

  • 1.  Deleted Custom Event Properties

    Posted 04/17/23 09:25 AM

    Hi Team,

    Just a quick question !

    We have acidentally deleted a few CEP. I was wondering , if doing a recovery of a nightly backup is going to retrieve them.

    Thank you



    ------------------------------
    Adithya Turaga
    ------------------------------


  • 2.  RE: Deleted Custom Event Properties

    Posted 04/17/23 11:35 AM

    yes. Restore will bring back all your configuration details if you deleted CEP today and refer to backup the night before. 
    Pls use export functions like policies, log sources etc in your other weekly backup procedures so you are independant from restore config function which has certain limitations when used after a while. In your case it should (hopefully) work. Before restoring do another maual backup as fallback scenario.



    ------------------------------
    [Karl] [Jaeger] [Business Partner]
    [QRadar Specialist]
    [pro4bizz]
    [Karlsruhe] [Germany]
    [4972190981722]
    ------------------------------



Related Content