20.0 Backing Up and Restoring Data

The Change Guardian backup and restore utility is a script that performs a backup of the Change Guardian data and also lets you restore the data at any given point in time on the Change Guardian server.

NOTE:To ensure compatibility you must restore backed up data to the same version of Change Guardian, use the same computer (IP address and Hostname match) you used to create the backup and ensure that the Install Configuration or custom path (if any) and FIPS configuration also match the original.

You can use the backup and restore utility in the following scenarios:

  • System Failure: In the event of a system failure, you must first reinstall Change Guardian and then use the cgbackup_util.sh script with the restore parameter to restore the most recent data that you backed up.

  • Data Loss: In the event of data loss, use the cgbackup_util.sh script with the restore parameter to restore the most recent data that you backed up.

You must back up the following data to make a full restore:

  • Configuration data: Data stored in the config, data, 3rdparty/postgresql, and 3rdparty/jetty directories, and the data in the Change Guardian database. This data includes configuration files, property files, keystore files, alert rules, all assets and groups in Agent Manager,.yml configuration files, Database which stores AMS data, AD Domain information, additional event destination information, email settings, users, filters, and dynamic lists.

    NOTE:The configuration data is critical and you should always include the configuration data in the backup.

  • Event data: Dynamic event data and raw event data stored in the data/eventdata and /var/opt/novell/sentinel/data/rawdata directories. The event data also includes event associations stored in the /var/opt/novell/sentinel/data/eventdata/exported_associations directory. The event associations data includes correlated event association data and the incident event association data.

  • Secondary storage data: Closed event data files that have been moved to the secondary storage.

  • Change Guardian logs: Log files generated by Change Guardian and stored in the /var/opt/novell/sentinel/log directory.

  • Change Guardian Policies: Policies and policy assignments that are stored in Change Guardian server. You can also use the Export and Import options to back up policies. However, backup script allows you to include policies as well in the backed up data.