cancel
Showing results for 
Show  only  | Search instead for 
Did you mean: 

ESM 11.x Data backup duration

Jump to solution

Hi, 

Has anyone performed a databackup yet on ESM 11.x? What is the typical duration for that data backup? We tried performing one and it was going for about the rate of 200G/day. On 2 environments weve experienced this despite one having just a switch between the remote location and the SIEM? Is this normal on ver 11.x ? previously on the same setup but on 10.x we were able to perform a fullbackup estiamated around 6TB in just 2 days. Please advise 

1 Solution

Accepted Solutions
pbpillai
McAfee Employee
McAfee Employee
Report Inappropriate Content
Message 2 of 8

Re: ESM 11.x Data backup duration

Jump to solution
7 Replies
pbpillai
McAfee Employee
McAfee Employee
Report Inappropriate Content
Message 2 of 8

Re: ESM 11.x Data backup duration

Jump to solution

.

Re: ESM 11.x Data backup duration

Jump to solution

HI,

But should it be the same as 10.x backup? Based on your experience how long does it take? Should it be as fast a a 10.x fullbackup? Weve had 2 systems weve observed the 200GB/day rate and one of them has a virtual back-to-back connection with the remote location with only a switch is between them. 

danwsdg
Level 7
Report Inappropriate Content
Message 4 of 8

Re: ESM 11.x Data backup duration

Jump to solution

I have the same problem. In version 10.X "full backup" took several hours and the resulting files were almost 5 TB. In version 11.3.2 the "data backup" has been running for several days and the resulting files are now only 130 GB. The backup is performed to the same NFS location. Nothing has changed in the network connections.

lratcliffe
McAfee Employee
McAfee Employee
Report Inappropriate Content
Message 5 of 8

Re: ESM 11.x Data backup duration

Jump to solution

Check the backup is still running with:

curl -X GET http://127.0.0.1:8888/Snowservice/SnowflexAdminServices/GetBackupRestoreStatus | python -mjson.tool

If the backup is no longer running and didn't complete as expected, please raise a service request so we can investigate and assist and reference SIEMSFX-1822 - this may be related.   We need to confirm if this is the same issue.

Was my reply helpful?

If this information was helpful in any way or answered your question, will you please select Accept as Solution in my reply and together we can help other members?
danwsdg
Level 7
Report Inappropriate Content
Message 6 of 8

Re: ESM 11.x Data backup duration

Jump to solution

My backup is still running:

Curl response:

{

"addlInfo": "Backup is currently in progress serverNames: XXXXXXXX-XXXX-XXXX-XXXX-XXXXXXXXXXXX ",
"operationType": "backup",
"status": "inProgress"
}

Re: ESM 11.x Data backup duration

Jump to solution

Hi

Were currently running a data backup with one of our clients, weve arranged a virtually back-to-back connect between SIEM and the NFS server and the transfer rate is still very slow. Weve tried the query you provided and our backup is still running however at a very slow rate 10GB at 2.5 hrs. Can you confirm if the data backup generation for 11.x is supposed to be this slow ? In your experience what is the fastest completion time or if you could give us an idea on how fast the data backup should run that would be helpful. Thank you.

danwsdg
Level 7
Report Inappropriate Content
Message 8 of 8

Re: ESM 11.x Data backup duration

Jump to solution

Hi 

My first data backup took about 10 days to perform. From the records in the backup log it seems that most of the time the alert tables were backed up. It seems that the problem is not the connection to NAS but the long time of execution of queries selecting data for backup. Another run of data backup I have not yet performed because in the meantime there was another problem, which is being diagnosed.

You Deserve an Award
Don't forget, when your helpful posts earn a kudos or get accepted as a solution you can unlock perks and badges. Those aren't the only badges, either. How many can you collect? Click here to learn more.

Community Help Hub

    New to the forums or need help finding your way around the forums? There's a whole hub of community resources to help you.

  • Find Forum FAQs
  • Learn How to Earn Badges
  • Ask for Help
Go to Community Help

Join the Community

    Thousands of customers use the McAfee Community for peer-to-peer and expert product support. Enjoy these benefits with a free membership:

  • Get helpful solutions from McAfee experts.
  • Stay connected to product conversations that matter to you.
  • Participate in product groups led by McAfee employees.
Join the Community
Join the Community