Skip to main content
EEHC
Explorer III
June 21, 2022
Solved

How I do backup for FortiSIEM?

  • June 21, 2022
  • 3 replies
  • 5838 views

There are data in several places and several stages. During installation FortiSIEM settings. In Admin>Ssettings, Admin>Device Support, Admin>Setub and CMDB there are changes made. Also, hosts are added to the "hosts" file. How do whole backup FortiSIEM so that I can restore it later?
For a minimum, I tried to backup the configuration of the device.
I tried to back up the network device configuration and installed software versions from /data/svn. I did not find svn in /the data folder. Also, the database files are stored in
"/data/cmdb/data". I did not find the folder in this place. I copied them from another place.
I tried to archive the events from the web Admin>Settings>Database, but I did not know which organization should search for.
Is there a built-in tool to backup FortiSIEM or do I have to use a backup system like Dell AVAMAR?

Best answer by ssudhakar

Hi there:

 

Can you please try using the following and let me know if it works for you ?

 

https://help.fortinet.com/fsiem/6-1-0/Online-Help/HTML5_Help/appendix-backing_up_restoring_fortisiem_dir_db.htm

 

https://community.fortinet.com/t5/FortiSIEM/Technical-Tip-How-to-backup-the-CMDB/ta-p/197659

 

Thank you,

Hope.

3 replies

EEHC
EEHCAuthor
Explorer III
June 21, 2022

I opened a ticket (waiting for the reply) but I like to know your experience.

ssudhakar
Staff
ssudhakarAnswer
Staff
June 21, 2022
EEHC
EEHCAuthor
Explorer III
June 22, 2022

Thanks, it helped so much. I used WinSCP to copy the folders.

Is there a method to backup FortiSIEM all? I believe it should be treated as a Linux server and in this case, I should use a backup system do to backup it.

Thought Leadership Security Summit. Outpace New Threats with AI - enhanced defense. Tuesday, Septmeber 15, 8:30 AM - 2:30 PM PT. The Golf Club at Newcastle, WA.
Fortinet Flag the Hack. Wednesday, August 26, 9:00 AM - 5:00 PM ET, COSM, Atlanta, GA.