IBM QRadar SOAR

IBM QRadar SOAR

Join this online user group to communicate across Security product users and IBM experts by sharing advice and best practices with peers and staying up to date regarding product enhancements.

 View Only
  • 1.  IBM SOAR Backup & Restore

    Posted Wed August 02, 2023 01:41 AM

    Hi all!

    What is the difference between soarSystemBackup and resSystemBackup? What's the safest method to get the full configuration and data backup of SOAR?

    Appreciate your responses.

    Thank you.



    ------------------------------
    Dushan Dissanayake Information Security Engineer
    ------------------------------


  • 2.  RE: IBM SOAR Backup & Restore

    Posted Thu August 03, 2023 08:51 AM

    Hi Dushan, 

    Per Backup and restore - IBM Documentation

    The soarSystemBackup backs up specific point-in-time data from PostgreSQL database (through the pgBackRest repository), key vaults, configuration files, attachments, and Elasticsearch indexes. The entire backup archive can then be restored on another system. You can also use this backup solution to create backups without taking down the system. This method is more efficient than other backup methods and results in less downtime, making it the recommended backup and restore method for the SOAR Platform.

    The resSystemBackup and resSystemRestore commands to back up the PostgreSQL database, key vault, and attachments. It is intended for complete backups. You can use these commands to migrate the SOAR Platform to another server.

    If looking for a backup solution, I'd look to soarSystemBackup. If you're migrating to a different server, thne use the resSystemBackup. It appears that resSystemBackup is the original backup solution, and the soaringSystemBackup is the new and improved version as it supports backing up while the system is still online, and other features. 

    Hope this helps :)
    Daryl ladd



    ------------------------------
    Daryl Ladd
    ------------------------------