32.0 Migrating Data to Scalable Storage

You may have a single Sentinel server or multiple Sentinel servers with traditional storage. The data migration process you need to follow depends on how you want to set up and maintain your Sentinel deployment.

Table 32-1 Data Migration Process for Your Sentinel Deployment

Sentinel Deployment	Migration Process
You have a single Sentinel server and you plan to upgrade your existing Sentinel server to scalable storage.	Migrate the event data and raw data from traditional storage to scalable storage once you upgrade your Sentinel server and enable scalable storage. For more information, see Section 34.0, Migrating Data.
You have a single Sentinel server with traditional storage and you want to set up another Sentinel server for scalable storage so that you can use all the features in Sentinel.	Use the Backup and Restore utility to migrate data from Sentinel with traditional storage to Sentinel with scalable storage. For information about using the backup and restore utility, see Backing Up and Restoring Data in the Sentinel Administration Guide.
You have a multi-tier setup where you have multiple Sentinel servers and you plan to set up a new Sentinel server or use one of the existing servers for scalable storage. You need to migrate configuration data in addition to event data and raw data.	In a multi-tier setup, you can identify one of the traditional Sentinel servers that has most of your data and then use the backup and restore utility to migrate the data. If you need to back up data from the rest of your Sentinel servers, you must migrate the configuration data, event data, and raw data from those servers using a different approach described later in this section. You must also manually re-create some of the configurations. You cannot use the backup and restore utility to migrate your data from multiple servers because the utility overrides existing data when you restore. For example, if you have already restored data from Server A and then you try to restore data from Server B, this utility overrides the data already restored from Server A. Therefore, to understand the data migrate process involved, follow the instructions provided in the following sections in the same order: Data You Can Migrate Migrating Configuration Data Migrating Data Migrating Alerts and NetFlow Data Updating Sentinel Clients Importing ESM Configuration

Sentinel Deployment

Migration Process

You have a single Sentinel server and you plan to upgrade your existing Sentinel server to scalable storage.

Migrate the event data and raw data from traditional storage to scalable storage once you upgrade your Sentinel server and enable scalable storage.

For more information, see Section 34.0, Migrating Data.

You have a single Sentinel server with traditional storage and you want to set up another Sentinel server for scalable storage so that you can use all the features in Sentinel.

Use the Backup and Restore utility to migrate data from Sentinel with traditional storage to Sentinel with scalable storage.

For information about using the backup and restore utility, see Backing Up and Restoring Data in the Sentinel Administration Guide.

You have a multi-tier setup where you have multiple Sentinel servers and you plan to set up a new Sentinel server or use one of the existing servers for scalable storage. You need to migrate configuration data in addition to event data and raw data.

In a multi-tier setup, you can identify one of the traditional Sentinel servers that has most of your data and then use the backup and restore utility to migrate the data.

If you need to back up data from the rest of your Sentinel servers, you must migrate the configuration data, event data, and raw data from those servers using a different approach described later in this section. You must also manually re-create some of the configurations.

You cannot use the backup and restore utility to migrate your data from multiple servers because the utility overrides existing data when you restore. For example, if you have already restored data from Server A and then you try to restore data from Server B, this utility overrides the data already restored from Server A.

Therefore, to understand the data migrate process involved, follow the instructions provided in the following sections in the same order: