IBM Security QRadar SOAR

 View Only

soarSystemBackup problem

  • 1.  soarSystemBackup problem

    Posted Wed October 26, 2022 03:40 PM
    v.46.1 got new way to backup files.
    however i got problem with it

    first i created new LV with command:
    sudo soarMoveAttachments -n attachments -s 10
    Do you want to continue ? YES/NO: YES
    [2022-10-25 10:15:31] SOAR services suspended now...
    [2022-10-25 10:15:37] Moving attachments...
    [2022-10-25 10:15:42] SOAR services being resumed...
    [2022-10-25 10:16:17] SUCCESS!  Attachments are moved.
    Total elapsed time: 00:01:00
    [root@resilient crypt]# 

    it created xfs LV, added info to /etc/fstaband mounted it
    however when i try to use soarSystemBackup
    i got error message:
    [root@resilient crypt]# soarSystemBackup
    This backup procedure will stop services for a short time to ensure data consistency.
    This procedure will fail if there are database backup happening at the same time.
    Do you want to continue ? YES/NO: YES
    Please do not interrupt while the backup is in progress.
    [2022-10-26 09:25:16] Suspending SOAR service...
    [2022-10-26 09:25:25] SOAR servcies Suspended.
    [2022-10-26 09:25:35] Creating ElasticSearch snapshot. This may take several minutes, please wait... (The task will time out in 1800 seconds.)
    [2022-10-26 09:25:52] ERROR: Error mounting /mnt/soar_backup_crypt/crypt: mount: wrong fs type, bad option, bad superblock on /dev/mapper/vg1-soar_snap_shot_crypt,
    missing codepage or helper program, or other error
    In some cases useful info is found in syslog - try
    dmesg | tail or so.
    Total elapsed time: 00:02:09
    FAILED! Unable to create a backup.
    have any one had similar problem or know how to fix it?

    Krzysztof Muchalski