IBM QRadar

IBM QRadar

Join this online user group to communicate across Security product users and IBM experts by sharing advice and best practices with peers and staying up to date regarding product enhancements.

 View Only
  • 1.  Restore data in qradar (8.5gb)

    Posted Wed December 30, 2020 09:04 AM

    Hello Experts,

    i have a data backup of 8.4GB that i want to restore back to QRadar. I have manually move it to thye /store/backupHost/inbound directory and i can see the file in the backup and recovery page. However, when i click on this file the restore button is gray out.

    Please assist!!



    ------------------------------
    benjamin Nworah
    ------------------------------


  • 2.  RE: Restore data in qradar (8.5gb)

    Posted Mon January 04, 2021 11:18 AM

    Hi, Benjamin.

    QRadar data backups are treated differently from QRadar data backups. The Restore option in the UI is currently only for config backups on a console. Data backups are performed on the console, processors, and  data nodes, and they have to be restored manually from the command line using the tar command, as described here:

    https://www.ibm.com/support/knowledgecenter/SS42VS_7.4/com.ibm.qradar.doc/t_qradar_siem_restoring_data.html

    Hope this answers your question.

    Adam Reece
    IBM QRadar Support



    ------------------------------
    Adam Reece
    ------------------------------



  • 3.  RE: Restore data in qradar (8.5gb)

    Posted Tue January 05, 2021 08:36 AM
    Hello Adam,

    Thanks, i already saw this documentation.

    Regards,

    ------------------------------
    benjamin Nworah
    ------------------------------