Document toolboxDocument toolbox

Back Up and Restore Configurations

Owned by Jonas Gonzalez
Nov 29, 2024
1 min read

A backup script is installed as part of the overall Devo SOAR installation process. Backups are set to take place automatically, twice per day.
Each backup includes the following configuration items:

  • Connections

  • Destinations

  • Event Types

  • Full playbook structure

  • Streams

  • Integration instances

  • Rule sets and rules

  • Scripts uploaded to the Scripts page

  • User account configurations

  • Sharing settings (public/private)

  • Threat GPS sources

Backups do not include the following operational data on the system:

  • Batches

  • Event segments

  • Playbook execution results

  • Starred correlations

If a failure occurs and your installation must be restored, the operational data can be regenerated using the restored configuration files.

In addition to the automatic twice per day backups, an administrator can invoke the backup script on demand by using the following command:

/opt/logichub/scripts/backup.sh

Backup files are kept for 30 days by default, and are stored as text files in this directory on the LogicHub host:

/opt/logichub/backups

The backup filename format includes the deployment and timestamp:
lhub-backup.-_.tar.gz

Example:
lhub-backup.20180218-0845_m21.12.tar.gz