Preparing for a Database Recovery

In the event your database is lost, you must work with a Support Technician to recover the ArcSight Database. Before doing so, you must prepare your environment for the recovery process. This process is separate from restoring the database as you are preparing to rebuild the database in this scenario.

NOTE: You must complete this process with the ArcSight Platform Installer. If you use a manual install, it will be difficult to access the necessary files needed in this process.

1. To install the database, run the ArcSight Platform Installer.

   NOTE: The following installation commands must be completed with no exceptions:

• ./arcsight-install -c /opt/my-install-config.yaml --cmd preinstall

• ./arcsight-install -c /opt/my-install-config.yaml --cmd install

• ./arcsight-install -c /opt/my-install-config.yaml --cmd postinstall

2. After installation is complete, ensure that the events collected by SmartConnectors can be copied to the database.

   This step ensures the events are flowing properly into the database and that the installation was successful.

3. Configure the database backup. This process generates the following backup-related file:

• /opt/arcsight-db-tools/scripts/db_backup.sh config

4. Perform a backup of the database. This process generates the following backup-related file:

   . /opt/arcsight-db-tools/scripts/db_backup.sh backup

   This steps ensures that the backup process is working without error.

5. Execute the following commands on database node1 to create separate directories:

   • mkdir /opt/db-saved

   • mkdir /opt/db-saved/db-cert

   • mkdir /opt/db-saved/db-config

6. Execute the following commands on database node1:

• cd /opt/arcsight-db-tools

• cp db-remote-install.properties /opt/db-saved

• cp cert/* /opt/db-saved/db-cert

• cd /opt/arcsight-db-tools/config

• cp db_credentials_default.properties /opt/db-saved/db-config

• cp db_user.properties /opt/db-saved/db-config

• cp backup_restore_cloud_storage.ini /opt/db-saved/db-config

• cp backup_restore_cloud_storage_test.ini /opt/db-saved/db-config

• cp db_backup.properties /opt/db-saved/db-config

• cp password.ini /opt/db-saved/db-config

7. Save the /opt/db-saved directory from step 7 to a location outside of the database.

8. Save the following S3 storage credentials to a location outside of the database:

• AWS: Access key| Secret

• minIO: MINIO_ROOT_USER | MINIO_ROOT_PASSWORD

• S3 certs/keys, if available