You can use the backup and restore utility to migrate Alerts and NetFlow data from the source server to target server. For alerts, this utility restores the events that triggered the alert. However, it does not restore the associated correlation rule and knowledge base information.
Use the following commands to back up and restore Alerts and NetFlow data:
For backing up: ./backup_util.sh -i
For restore:
./backup_util.sh -m restore -f <backup_file_path>
For Alerts and NetFlow data, you have an option to either override or to append to existing data. Choose the desired option.
Although the above command backs up and restores the Security Intelligence data, you cannot use that data because Security Intelligence is not available in SSDM.
For detailed information about using the backup and restore utility, see Backing Up and Restoring Data
in the Sentinel Administration Guide.