Lsdf

Páginas: 15 (3702 palabras) Publicado: 18 de junio de 2012
30/04/12

LogRhythm Support Portal

LogRhythm Backup and Recover y Pr ocedur es
T opic Conte nts

Overview
LogRhy thm Data Lay out
Event Manager
Log Manager
Agents
Ris k As s es s ment
Minimal Ba ckup
Full Ba ckup
Ba ckup the LogRhy thm Event Manager Databas e
Automated W eek ly Ba ckups
Manual Ba ckups
Ba ckup the LogRhy thm Arc hives
Ba ckup the LogRhy thm Log Manager Databases
Automated Ba ckups
Manual Ba ckups
Ba ckup the LogRhy thm Servic e Direc tories
Ba ckup the Event Manager Servic e Direc tories
Ba ckup the Log Manager Servic e Direc tories
Ba ckup the Sy s tem Monitor Agent Servic e Direc tories
Rec overy
Event Manager Res toration
Log Manager Res toration
Sy s tem Monitor Agent Res toration
Res tore from a Databas e Ba ckup
Res tore Inac tiveArc hives
Res tore Servic e State
Dark Spare Ba ckup Applianc e

Ov e rv ie w
Des c ribed here are the ba ckup and res toration guidelines and proc edures required for rec overy of LogRhy thm®
vers ions 4.x and later – it does not apply to LogRhy thm vers ions earlier than 4.x . Following thes e guidelines
ens ures that y our LogRhy thm deploy ment and data c an be res tored from s c heduledba ckups and arc hived log
data in the event of a failure or dis as ter.
Bac k to Top

LogRhythm Data Layout
https://support.logrhythm.com/ics/support/splash.asp?deptID=5730

1/9

30/04/12

LogRhythm Support Portal

To unders tand and evaluate what s hould be bac k ed up, this s ec tion des c ribes the data lay out and loc ations
within the LogRhy thm deploy ment.
There are threety pes of s y s tems in a LogRhy thm Deploy ment: the Event Manager (one only ); Log Managers ;
and s y s tems hos ting LogRhy thm Agents inc luding the Event and Log Managers .
There are two ty pes of data that c an be bac k ed up; SQL databas es and the LogRhy thm c omponent s ervic e
direc tories . The SQL databas es s tore the c onfiguration and data c ollec ted and proc es s ed by LogRhythm. The
c omponent s ervic e direc tories c ontain loc al s ervic e c onfigurations and s tate files .
Bac k to Top
Eve nt Ma na ge r
The Event Manager hous es the following LogRhy thm data:
SQL Server databas es :
LogRhy thmEMDB
LogRhy thm_Alarms
LogRhy thm_Events
LogRhy thm_LogMart
Component Servic e Direc tories :
LogRhy thm Alarming and Res pons e Manager
LogRhy thm Job Manager(only in LogRhy thm 5.0 and later)
LogRhy thm Sy s tem Monitor
Log M a na ge r
The Log Manager hous es the following LogRhy thm data:
SQL Server databas es - LogRhy thmLMDB
Component Servic e Direc tories :
LogRhy thm Mediator Server
LogRhy thm Sy s tem Monitor
Age nts
A s y s tem hos ting a LogRhy thm Agent hous es LogRhy thm data in
Component Servic e Direc tories - LogRhy thm Sy s temMonitor.
Bac k to Top

Risk Asse ssme nt
Eac h s ite mus t tak e into c ons ideration its own requirements and res ourc es s uc h as time and s torage c apac ity
when s c heduling ba ckups. However, pleas e be aware that a FULL rec overy of y our LogRhy thm deploy ment c an
only be performed up to the point of the la st com ple te Log Ma na ge r a nd Eve nt Ma na ge r da ta ba se ba ckups.Data c ollec ted between ba ckups of thes e databas es may be los t if any uns c heduled downtime is c aus ed by a
failure or dis as ter.
Minim a l Ba ckup
If s ite-s pec ific res traints prevent y ou from doing a full ba ckup of all databas es and s ervic e direc tories , the
minimal rec ommended ba ckup inc ludes :
LogRhy thm EMDB
LogRhy thm Arc hiveshttps://support.logrhythm.com/ics/support/splash.asp?deptID=5730

2/9

30/04/12

LogRhythm Support Portal

In the event of a failure or dis as ter, this minimal ba ckup allows a c omplete res toration of the LogRhy thm
c onfiguration, all arc hived log data, and the SHA1 has hes for the arc hived log data.
Even with this minimal ba ckup, Log Manager and LogMart data c an be partially res tored from LogRhy thm
Arc hives via...
Leer documento completo

Regístrate para leer el documento completo.

Estos documentos también te pueden resultar útiles

  • lsdf
  • KJhsjke nkskfl lsdf

Conviértase en miembro formal de Buenas Tareas

INSCRÍBETE - ES GRATIS