IBM QRadar SOAR

IBM QRadar SOAR

Join this online user group to communicate across Security product users and IBM experts by sharing advice and best practices with peers and staying up to date regarding product enhancements.

 View Only

  • 1.  soarSystemBackup problem

    Posted 10/26/22 03:40 PM
    hi
    v.46.1 got new way to backup files.
    however i got problem with it

    first i created new LV with command:
    sudo soarMoveAttachments -n attachments -s 10
    Do you want to continue ? YES/NO: YES
[2022-10-25 10:15:31] SOAR services suspended now...
[2022-10-25 10:15:37] Moving attachments...
[2022-10-25 10:15:42] SOAR services being resumed...
[2022-10-25 10:16:17] SUCCESS!  Attachments are moved.
Total elapsed time: 00:01:00
[root@resilient crypt]#

    it created xfs LV, added info to /etc/fstaband mounted it
    however when i try to use soarSystemBackup
    i got error message:
    [root@resilient crypt]# soarSystemBackup
This backup procedure will stop services for a short time to ensure data consistency.
This procedure will fail if there are database backup happening at the same time.
Do you want to continue ? YES/NO: YES
Please do not interrupt while the backup is in progress.
[2022-10-26 09:25:16] Suspending SOAR service...
[2022-10-26 09:25:25] SOAR servcies Suspended.
[2022-10-26 09:25:35] Creating ElasticSearch snapshot. This may take several minutes, please wait... (The task will time out in 1800 seconds.)
[2022-10-26 09:25:52] ERROR: Error mounting /mnt/soar_backup_crypt/crypt: mount: wrong fs type, bad option, bad superblock on /dev/mapper/vg1-soar_snap_shot_crypt,
missing codepage or helper program, or other error

In some cases useful info is found in syslog - try
dmesg | tail or so.

Total elapsed time: 00:02:09
FAILED! Unable to create a backup.
    have any one had similar problem or know how to fix it?

    ------------------------------
    Krzysztof Muchalski
    ------------------------------


Related Content