IBM Support

QRadar: Backup and restore between versions and appliances

Question & Answer


Question

Under what circumstances can backup or restore of configurations be applied?

Cause

Backups and restores must be applied properly.

Answer

Configuration backups:

  • When restoring a configuration backup, it must be restored to a machine with the same product version and patch level. To confirm what version a configuration backup is using, unpack the configuration backup and look in /opt/qradar/conf/patch_list using SSH to a Console.
    Enter the command cat /opt/qradar/conf/patch_list and you will find the current version being used in last entry from the list.
  • Generally, backups cannot be restored between appliance types. You cannot apply a 2100 backup to a 3100 appliance.
Data backups:
  • Data can be restored to any version, but it will need to match the configuration backup for the log or flow sources in order to be correctly identified.
  • Where do you find more information?

[{"Product":{"code":"SSBQAC","label":"IBM Security QRadar SIEM"},"Business Unit":{"code":"BU059","label":"IBM Software w\/o TPS"},"Component":"Admin Console","Platform":[{"code":"PF016","label":"Linux"}],"Version":"7.2;7.3","Edition":"All Editions","Line of Business":{"code":"LOB24","label":"Security Software"}}]

Historical Number

1479

Document Information

Modified date:
16 June 2018

UID

swg21622610