Backing up a Capability's Configuration Data

This section presents the data backup process for ArcSight Capabilities on CDF. You can configure all ArcSight capabilities to back up their configuration data on a regular basis. The backed up data can be restored when needed.

To backup data, complete the following steps:

  1. Generate the IDM Token

  2. Verifying Application Registration

  3. Registering a Capability

  4. Starting the Backup

Starting the Backup

Use the db_admin.sh, backup-restore script, located in the /opt/arcsight/kubernetes/tools/postgres-backup/ directory to back up data.

Understanding the backup and restore script

Following are the db_admin.sh script options and parameters:

 ./db_admin.sh [Options][Parameters]
Options backup Start database backup
status Obtain database backup status
restore Start database restore
Parameters -t|--type Perform backup/restore operation
-u|--user Specifies the administrator user name
-p|--password Specifies the password for administrator
-l|--location Identify specific backup/restore operation
-a|--app

Specifies the appName that want to restore

-n|--namespace Namespace that want to backup/restore(default is core)

Running the backup script:

  1. Run the following command:

    ./db_admin.sh backup
  2. Specify the IDM token that you received in the Generate the IDM Token section, or the Administrator name and Password (cluster credentials) when prompted.

  3. Specify the backup location. The backup data is stored in the following location:

    /opt/arcsight-nfs/db-backup-vol/pg-data-backup/backupd/backups/

  4. Verify the backup status:

    ./db_admin.sh status -l <location> -t backup
  5. To see data backup for all the ArcSight Capabilities, run the following command:

    ls -lh /opt/arcsight-nfs/db-backup-vol/pg-data-backup/backupd/backups/

    Example output shows data backup for all the ArcSight Capabilities:

    total 0

    drwxr-x---. 3 arcsight arcsight 44 Mar 25 17:04 2021-03-25T17:04:43.807Z

    drwxr-x---. 2 arcsight arcsight 27 Mar 25 17:37 2021-03-25T17:37:24.907Z

    drwxr-x---. 2 arcsight arcsight 27 Mar 29 08:24 2021-03-29T08:24:14.530Z

    drwxr-x---. 2 arcsight arcsight 27 Mar 29 09:36 2021-03-29T09:36:19.605Z

    drwxr-x---. 2 arcsight arcsight 27 Mar 29 09:54 2021-03-29T09:54:01.232Z

    drwxr-x---. 3 arcsight arcsight 44 Mar 29 13:05 2021-03-29T13:05:46.311Z

    drwxr-x---. 4 arcsight arcsight 56 Mar 29 14:12 2021-03-29T14:12:58.071Z

    drwxr-x---. 4 arcsight arcsight 56 Mar 30 06:48 2021-03-30T06:48:57.245Z

    drwxr-x---. 4 arcsight arcsight 56 Apr 2 14:34 2021-04-02T14:34:55.128Z

    drwxr-x---. 4 arcsight arcsight 56 Apr 16 12:17 2021-04-16T12:17:27.006Z

    -rw-r-----. 1 arcsight arcsight 0 Mar 25 17:04 backupd.lock

The backup data is saved in directories with timestamps. For example, 2021-03-25T17:37:24.907Z. The data stored here is used during the restore procedure of applications.