When the backup files are missing from the disk, the respective backup table entry on the
Backup and Recovery page is marked with an exclamation icon to show that the
file is not retrievable. Files that are missing cannot be downloaded or restored. This issue can
occur when you are using external storage that is no longer available, or is offline.
Procedure
-
On the Admin tab, click Backup and
Recovery.
-
If the external storage is offline or no longer available, delete the table entry by using the
Delete option at the top of the Backup and Recovery
page.
Note: If you are not expecting this behavior and are using external storage for your backup archive
location, investigate whether the storage system is still accessible. If it is offline, and you are
able to restore the directory, the indicator icons are automatically updated and removed when the
system detects the restored files.
-
On the Backup and Recovery page, click Configure
and take note of the Backup Repository Path.
-
Log out of QRadar and log
back in to ensure that the files are again accessible by fixing the external mount or restoring
missing files to the appropriate backup location.
-
Refresh the Backup and Recovery page to synchronize the backups.