IMPORTANT ANNOUNCEMENT: On May 6, 2024, Carbon Black User eXchange (UeX) and Case Management will move to a new platform!
The Community will be in read-only mode starting April 19th, 7:00 AM PDT. Check out the blog post!
You will still be able to use the case portal to create and interact with your support cases until the transition, view more information here!

EDR: How To Restore Unified View from Backup

EDR: How To Restore Unified View from Backup

Environment

EDR Unified View:  6.1.3 and higher

Objective

How to restore Unified View from previously generated backup

Resolution

  1. Stop Cb Unified View
service cb-unifiedview stop
  1. Change directories to the backup location
cd /etc/cb/backup​
  1. Restore configuration files
tar -P -xvf cbhosts.tar
tar -P -xvf cbyum.tar
tar -P -xvf cbiptables.tar (CentOS 6/RH 6 only)
tar -P -xvf cbfirewalld.tar (CentOS 7/RH 7 only)
tar -P -xvf cbconfig.tar 
tar -P -xvf cbrsyslog.tar 
tar -P -xvf cbrsyslogd.tar 
tar -P -xvf cblogrotate.tar
  1. Restore Postgres database
service cb-pgsql start
dropdb cb -p 5002
psql template1 -p 5002 -f psqlroles.sql
psql template1 -p 5002 -f psqldump_config.sql
service cb-pgsql stop
  1. Start the Cb Unified View services
service cb-unifiedview start

Related Content


Labels (1)
Tags (2)
Was this article helpful? Yes No
No ratings
Article Information
Author:
Creation Date:
‎09-09-2020
Views:
463
Contributors