Currently I am running 1 ESM 6000 with 8TB Data and 2 ELM 5600 with 3TB and 7TB each.
I want to backup data ESM & ELM using NAS device for disaster recovery and minimize the downtime during backup.
I know there is 2 ways for this. One is configuring redundant ESM and mirroring ELM and another one
is using backup and restore using external storage device such as NAS.
Would you let me know how do I configure incremental backup for ESM and ELM ?
Thanks a lot
Yes you can configure ESM Redundant till 10.4.0 SIEM version but from 11.x SIEM version we have ESM clustering and for more details you can refer below link;
Also, in 11.3.0 SIEM version there are 2 backups you can configure on your NAS drive which is given in below link;
For ELM, we don't recommend ELM mirroring rather mirroring you can configure ELM redundant.
I appreciate your prompt reply.
In documentation, ELM backup function can backup only ELM configuration files such as database and configuration environment data and for backup logging data, use mirroring function.
If so, Should I add another ELM server for mirroring ?
Currently I have 2 ELM Server and in this case, May I configure 2 existing ELM Server to 1 new ELM server mirroring ?
Thanks a lot
I would suggest to use ELM redundant rather than mirroring.
Mirroring does not create a backup of the storage pool. It creates a mirrored file system that uses both storage devices as the basis for the file system.