How to back up, restore, and migrate Active Response content

Technical Articles ID: KB90915
Last Modified: 2023-05-30 09:46:21 Etc/GMT

Environment

Active Response 2.x

Summary

Active Response lets you create your own content (triggers, reactions, saved searches, custom collectors), which resides in the Active Response Server database. You might want to keep this content when you upgrade your Active Response Server, for example, from Active Response 2.3 to a single appliance Active Response 2.4 installation. You must export the content, perform your upgrade, or install your new appliance, and then import this content.

This article provides a series of commands to speed up the process. Without the script, you must use the ePolicy Orchestrator (ePO) manager and migrate each content item individually.

NOTES:

If you don't migrate this content before performing the upgrade, you'll lose it.
This process must be performed when you migrate to a single 2.4 appliance.
You're not required to perform these steps once you've migrated to a version 2.4 or later single appliance set-up.

Solution

Back up your content:

Log on to your Active Response server and open a command-line session.
Export all catalog items to JSON files:
Type for i in collectors reactions triggers searches; do curl -XGET "localhost:8080/mar/api/service/catalog/$i/find?type=CUSTOM&index=0&pageSize=100000" > $i.json; done; and press Enter.

NOTE: The JSON files are placed in your current working directory.
Rename the exported JSON files:
Type for i in collector reaction trigger search; do mv $i*.json $i.json; done; and press Enter.
Move all JSON files on your Active Response server to a safe location, using either SCP or another tool of your preference.

Restore your content:

Log on to your Active Response server and open a command-line session.
Copy the JSON files from your safe location to your Active Response server. Use either SCP or another tool of your preference.

NOTE: You can place the copied files anywhere on the target server.
Import the JSON files:
Type for i in collector reaction trigger search; do curl -XPOST "localhost:8080/mar/api/service/import/$i" -H "Content-Type: application/json" -d @$i.json; done; and press Enter.

NOTE: The imported item name must be unique for the import to be successful.

Affected Products

Languages:

This article is available in the following languages:

Knowledge Center

How to back up, restore, and migrate Active Response content

Environment

Summary

Solution

Affected Products

Languages:

Title

Title

Knowledge Center

How to back up, restore, and migrate Active Response content

Environment

Summary

Solution

Affected Products

Languages:

Choose your region

Title

Title