000026927 - How to perform a nightly Linux RAID configuration backup on RSA NetWitness and RSA Security Analytics appliances

Document created by RSA Customer Support Employee on Jun 14, 2016Last modified by RSA Customer Support on Sep 12, 2018
Version 6Show Document
  • View in full screen mode

Article Content

Article Number000026927
Applies ToRSA Product Set: NetWitness Logs & Network, Security Analytics, NetWitness NextGen (Legacy)
RSA Product/Service Type: Decoder, Concentrator, Broker
RSA Version/Condition: 9.8, 10.x, 11.x
Platform: CentOS
IssueHow to perform a nightly Linux RAID configuration backup on RSA NetWitness and RSA Security Analytics appliances.
Resolution

RSA Customer Support recommends that the hardware RAID configuration of all NetWitness appliances be backed up on a daily basis to allow for easy recovery in the event of a RAID hardware failure and to avoid data loss.


 
In order to configure the nightly backup, follow the steps below:
  1. Download the nwraidbackup.sh script attached to this article.
  2. Use scp or another file transfer client to move the file to your RSA NetWitness appliance.
  3. Copy the file to /usr.
  4. The script is executable with the following command:

    chmod +x /usr/sbin/nwraidbackup.sh

  5. Run the following command:

    ln -s /usr/sbin/nwraidbackup.sh /etc/cron.daily/nwraidbackup

 
The configuration of all hardware RAID controllers will now be backed up into an archive file as /var/raidbackup/raidbackup-<datestamp>.tar.bz2.

The following are the contents of a sample backup archive:

tar tjf /var/raidbackup/raidbackup-2018.09.11-06.11.28.tar.bz2 raidbackup-2018.09.11-06.11.28/
raidbackup-2018.09.11-06.11.28/pdlist.out
raidbackup-2018.09.11-06.11.28/adaplist.out
raidbackup-2018.09.11-06.11.28/ldpdinfo.out
raidbackup-2018.09.11-06.11.28/adapevents.out
raidbackup-2018.09.11-06.11.28/adap0-PERCH710PMini.cfg
raidbackup-2018.09.11-06.11.28/adap1-PERCH810Adapter.cfg
raidbackup-2018.09.11-06.11.28/etc/
raidbackup-2018.09.11-06.11.28/etc/lvm/
raidbackup-2018.09.11-06.11.28/etc/lvm/archive/
raidbackup-2018.09.11-06.11.28/etc/lvm/archive/netwitness_vg00_00000-1923767138.vg
raidbackup-2018.09.11-06.11.28/etc/lvm/backup/
raidbackup-2018.09.11-06.11.28/etc/lvm/backup/netwitness_vg00
raidbackup-2018.09.11-06.11.28/etc/lvm/cache/
raidbackup-2018.09.11-06.11.28/etc/lvm/lvm.conf
raidbackup-2018.09.11-06.11.28/etc/lvm/lvmlocal.conf
raidbackup-2018.09.11-06.11.28/etc/lvm/profile/
raidbackup-2018.09.11-06.11.28/etc/lvm/profile/cache-mq.profile
raidbackup-2018.09.11-06.11.28/etc/lvm/profile/cache-smq.profile
raidbackup-2018.09.11-06.11.28/etc/lvm/profile/command_profile_template.profile
raidbackup-2018.09.11-06.11.28/etc/lvm/profile/lvmdbusd.profile
raidbackup-2018.09.11-06.11.28/etc/lvm/profile/metadata_profile_template.profile
raidbackup-2018.09.11-06.11.28/etc/lvm/profile/thin-generic.profile
raidbackup-2018.09.11-06.11.28/etc/lvm/profile/thin-performance.profile

If you are unsure of any of the steps above or experience any issues, contact RSA Customer Support and reference this article number for further assistance.
NotesThis script will delete any files older than 365 days in its output directory.
Legacy Article IDa59793

Attachments

Outcomes