IBM Security Guardium

 View Only
  • 1.  Archive Data Restore Fails

    Posted Thu November 19, 2020 06:26 AM
    Hello,

    In my environment, we have 2 Guardium Collectors V11.2. Data Archive is configured on one collector using the SCP. We want to test restore on another collector but we got an error:

    Error while importing file xxxxxxxxx.enc from 192.168.0.11 command /opt/IBM/Guardium/scripts/guard_file/import.pl SCP 192.168.0.11 username Directory/ xxxxxxxx.enc /var/IBM/Guardium/data/dump/TURBINE 0: Exit value=1


    In Guardium Aggregation/Archive log we can see status Succeeded and Comment Begin restore of 1 entries

    What can be a problem?

    Best Regards

    ------------------------------
    Sanela Kovač
    ------------------------------


  • 2.  RE: Archive Data Restore Fails

    Posted Thu November 19, 2020 04:12 PM
    Hi Sanela,

    I think the archive files does not exist on the archive server. Did you check the files? Also, can you paste the Aggregation/Archive Details and Error Logs?

    Regards,
    Veysel Gundogdu.

    ------------------------------
    Veysel Gundogdu
    ------------------------------



  • 3.  RE: Archive Data Restore Fails

    Posted Thu November 19, 2020 04:44 PM
    Hi,

    File exist on server. Details and Error Logs are the same:

    Error while importing file xxxxxxxxx.enc from 192.168.0.11 command /opt/IBM/Guardium/scripts/guard_file/import.pl SCP 192.168.0.11 username Directory/ xxxxxxxx.enc /var/IBM/Guardium/data/dump/TURBINE 0: Exit value=1

    Also, I tried command  'support must_gather app_issues', and check the 'app_output.txt' file but there is no errors.

    Best Regards


    ------------------------------
    Sanela Kovač
    ------------------------------



  • 4.  RE: Archive Data Restore Fails

    Posted Thu November 19, 2020 07:30 PM
    Hi,

    Have you applied shared secret key in both Guardium's. That's mandatory to use the same shared secret key.
    Please let me know.

    setup -> Tools & Views -> System -> shared secret key

    Thanks,
    Panendar Rao.C

    ------------------------------
    PHANENDRA RAO CHAVANA
    ------------------------------



  • 5.  RE: Archive Data Restore Fails

    Posted Mon November 23, 2020 11:00 AM
    Hello Pahnendra

    Basically when you try to restore files from different appliances stand alone to stand alone this a mandatory requirement otherwise there will no way for the unit were you trying to restore the archive to open the archive files since all archives use Guardium security from the source unit.

    Best Regards
    Juan Pluma
    IBM Guardium Support Team L2

    ------------------------------
    Juan Pluma
    ------------------------------



  • 6.  RE: Archive Data Restore Fails

    Posted Mon November 30, 2020 02:16 PM
    Hi Sanela,

    Also, you may need to catalogue the Data Archived files to the target appliance/Collector (type 'catalogue' at the User Interface filter you should see that option). Then, you just check the details from source Collector/appliance to fill the fields out.

    The target appliance may also require to have access to the location where the Data Archived files are stored as well.

    I hope that helps... 

    Thank you!
    -Felipe

    ------------------------------
    Felipe Boff
    ------------------------------