Are the incremental backups taken when setting regular backups to, for example, a CIFS location required to be kept forever in case of restore, or can I remove any incremental backups prior to the last full backup?
I.e., if I want to restore data, should the oldest file I need to restore be the last full backup, and then restore each of the subsequent incremental backups in order?
You need one full backup and all inkremental backup after the full backup until the next full backup
Sunday -> Full Backup
Monday -> 1. Inkremental
Tuesday -> 2. Inkremental
Wednesday -> 3. Inkremental
Saturday -> last Inkremental
-> next cycle.
The full backups can only be run manually - there doesn't seem to be a way of automating that. Only the incremental backups are automated.
Is this just an annoyance to live with, or is there a way of automating both types of backup?
I have asked McAfee if there is a way to script the full backup and was advised there is no way to do this.
There may be others on the forum who know what happens "under the hood" when you click the Full Backup Now option and from there create a script.
My Full Backups currently take in excess of 40 hours to run, so you may want to keep an eye on how much data you are backing up and how frequent you can/want to run them.
On which Version is your SIEM?
in 9.5 you can klick on System Properties -> System Information -> Backup & Restore and there you can configure a automated full backup. But not a inkremental.
If you have Linux skills you can run a script on the appliance or vm for backuping the machine.