Restoring the QRadar SOAR Plug-in app database

Follow these steps to roll back your IBM® QRadar® local database.

Before you begin

Before you roll back the database, you must stop the QRadar SOAR Plug-in app by using the API. 
curl -s -X POST -u <USER> -H 'Version: 19.0' -H 'Accept: application/json' 'https://<QRADAR_IP_ADDRESS/api/gui_app_framework/applications/<QRADAR_PLUGIN_APPLICATION_ID>?status=STOPPED'

For more information about using the Interactive API for Developers, see the REST API documentation on IBM Docs.

Procedure

  1. Enter the Docker image for the QRadar SOAR Plug-in app.
  2. Open the /store directory.
  3. Replace the resilient.db file with the backup file.
  4. Restart the QRadar SOAR Plug-in app by using the API. 
     curl -s -X POST -u <USER> -H 'Version: 19.0' -H 'Accept: application/json' 'https://<QRADAR_IP_ADDRESS/api/gui_app_framework/applications/<QRADAR_PLUGIN_APPLICATION_ID>?status=RUNNING'