Backup and Recovery

You can back up and recover JSA configuration information and data.

You can use the backup and recovery feature to back up your event and flow data; however, you must restore event and flow data manually. For more information, see Restoring Data.

By default, JSA creates a backup archive of your configuration information daily at midnight. The backup archive includes configuration information, data, or both from the previous day.

You can use two types of backups: configuration backups and data backups.

Configuration backups include the following components:

  • Application configuration

  • Assets

  • Custom logos

  • Custom rules

  • Device Support Modules (DSMs)

  • Event categories

  • Flow sources

  • Flow and event searches

  • Groups

  • Index management information

  • License key information

  • Log sources

  • Offenses

  • Reference set elements

  • Store and Forward schedules

  • User and user roles information

  • Vulnerability data (if JSA Vulnerability Manager is installed)

Data backups include the following information:

  • Audit log information

  • Event data

  • Flow data

  • Report data

  • Indexes

The data backup does not included application data. To configure and manage backups for application data, see Backing Up and Restoring App Data.

Related Documentation