Exporting and importing an application data

You can export and download your application data and import it into a new Concert instance to migrate or replicate an environment. The output of the export will be a .tar file and the output is stored in LZ bucket. The data is then reassessed when imported back into a Concert instance. You can export the application SBOM, Build SBOM, Deploy SBOM, and Package SBOM.

Attention: To ensure the security and integrity of your organization's data and resources, it is recommended that you get approval from your CISO or security team before exporting, storing, or sharing Concert data.
Who needs to complete this task?
User with Admin access to the Concert instance.

Instructions: Exporting an application definition using Concert API

You can export a single or multiple application definition by specifying its name in the URL path.

  1. Use the following commands to export single or multiple application definition data:
    curl -vvv '<concert_domain>/core/api/v1/export/applications?names=<app-name1,app-name2>' \
  -H 'accept: application/json' \
  -H 'InstanceId: <instance_id>' \
  -H 'Authorization: Bearer <token>' \
  -d '' -k
    Note: Record the toc_id included in the response. You need this to download the exported file.
  2. Download the exported .tar file:
    curl '<concert_domain>/core/api/v1/export/job/<toc_id>/download' \
 -H 'accept: application/json' \
 -H 'InstanceId: <InstanceId>' \
 -H 'Authorization: Bearer <token>' -k -O -J -L
    Note: The output of the exported application data will be a .tar file. The output file is stored in the LZ bucket.
Note: The export operation is only supported for application definitions that were generated from uploaded ConcertDef SBOM files that use the version schema 1.0.2 or higher. Refer to Generating ConcertDef SBOMs

Instructions: Importing application data using Concert API

Refer to the following command to import a file containing your application definition data to a new Concert instance.

curl -k -X POST 'https://<concert-domain>/ingestion/api/v1/import_files' \
     -H 'Authorization: Bearer <token>' \
     -H 'Content-Type: multipart/form-data' \
     -H 'InstanceId: <InstanceId>' \
     -F 'file=@<filepath>'

Instructions: Exporting an application definition using Concert UI

Refer the following instructions to export application definition data to your workstation.

  1. Select Inventory > Applications.
  2. Choose Definitions from the sub navigation and click to enable the check box(es) next to the relevant application definition(s).
  3. Click Export.
  4. Click View event status or select Administration > Event log to view the exported file.
  5. From the overflow menu against the exported file, choose Download.
    Note: The output of the exported application data will be a .tar file.
Note: The export operation is not supported for sample data files.

Instructions: Importing an application definition using Concert UI

Refer the following instructions to import application definition data from your workstation to a new Concert instance.

  1. Select Inventory > Applications.
  2. Click Define application > From exported file.
  3. Upload the relevant exported .tar file from the workstation.
  4. Click Upload.
Note: The import operation is not supported for sample data files.

Refresh the Applications page to view the imported file.