IBM QRadar

IBM QRadar

Join this online topic group to communicate across Security product users and IBM experts by sharing advice and best practices with peers and staying up to date regarding product enhancements.


#Security
#QRadar
#SecuringhybridcloudandAI
 View Only
  • 1.  Manually daily backup

    Posted 01/02/25 01:32 AM

    Hello! By some reasons we lost daily backups but still have its data in event processor. Which right way for creating daily backup manually for last days, day by day? For this we try use command tar -zcvf /store/backup/backup.nightly.manual.AZUQRE01_103.27_12_2024.data.tg  /store/ariel/events/payloads/2024/12/1/ /store/ariel/events/records/2024/12/1/ for the 1.12.2024. Ours plan is create ours own script for checking losted backup files and recreate by script. Is provided command  sufficient  for creating daily backup manually? Or may be we can use internal QRadar mechanism for that, just run it and provide needed date for daily backup? Whan the best way for such situation?



    ------------------------------
    Serhii Barabash
    ------------------------------


  • 2.  RE: Manually daily backup
    Best Answer

    Posted 01/06/25 12:37 AM

    Hello Serhii,

    Please go through below technote which will help you run the backup manually using the script. 
    https://www.ibm.com/support/pages/qradar-how-use-manual-data-backup-script-create-missed-backups

    You can check the above script and then see if that fits your requirement, Later you can use this script in your script which will also check for missing dates and run the manual backup.



    ------------------------------
    Vishal Tangadkar
    IBM INDIA PVT LTD
    ------------------------------



  • 3.  RE: Manually daily backup

    Posted 01/06/25 01:36 AM

    Thank you for answer. For some reason, i didn't come across this particular article about the manual process of creating a daily data archive. Thank you, this is what I need.



    ------------------------------
    Serhii Barabash
    ------------------------------