Backing up the QRadar SOAR Plug-in app database

Use this procedure to create a backup of your QRadar® SOAR Plug-in 4.1 database. If necessary, you can use this database backup to rollback to the previous version after you upgrade to QRadar SOAR Plug-in 5.0.

Before you begin

Before you back up the database, you must stop the QRadar SOAR Plug-in by using the API. The following example shows a curl command that uses the version 10.0 API.
curl -s -X POST -u <USER> -H 'Version: 19.0' -H 'Accept: application/json'
'https://<QRADAR_IP_ADDRESS/api/gui_app_framework/applications/<QRADAR_PLUGIN_APPLICATION_ID>?status=STOPPED'

For more information about using the Interactive API for Developers, see the REST API documentation on IBM Docs.

Procedure

  1. Open the /store/docker/volumes/qapp-<your app-id> directory.
  2. Make a copy of the resilient.db file.
  3. Restart the QRadar SOAR Plug-in app by using the API.
    The following example shows a curl command that uses the version 10.0 API.
    curl -s -X POST -u <USER> -H 'Version: 19.0' -H 'Accept: application/json' 'https://<QRADAR_IP_ADDRESS/api/gui_app_framework/applications/<QRADAR_PLUGIN_APPLICATION_ID>?status=RUNNING'