Configure Automated Platform Manager Database Backups

These databases can be backed up daily on a LogRhythm Platform Manager by configuring the backup parameters:

• LogRhythm_Alarms
• LogRhythm_CMDB
• LogRhythm_Events
• LogRhythm_LogMart
• LogRhythmEMDB

Ensure there is adequate storage space for the backups; they can fill several hundred GB. Often a LogRhythm appliance will not have sufficient space.

To set databases to back up to a local path

To configure the backups:

1. On the main toolbar, click Deployment Manager.
2. Click the Platform Manager tab.
3. To display the Data Management Settings window, click the Global System Settings button.
4. Enter values for the database BackupPaths in the grid. You can use a local drive (D:\LRBackup), network drive (F:\LRBackup), or UNC path (\\server\share). If using a network share or UNC path, the SQL Server service account needs read and write permissions for the shared network.
5. Click OK.

6. Set the LogRhythm Backup Job start step to start at the appropriate database.

After you set the backup path for each database to a valid path, the Platform Manager LogRhythm Backup job automatically performs a daily backup of the databases. The BackupPath parameter can be a UNC path to a network share to store the backups off the Platform Manager server.

To set databases to back up to a remote path, the SQL Server Agent service must run under a Windows domain account that has write access to the share. The account under which the SQL Server Agent runs can be configured from the SQL Server Configuration Manager. On the Start menu, click Apps, and then click SQL Server 2016 Configuration Manager.

Configure Additional Backup Jobs

By default, backups configured using Data Management Settings takes place as part of the Platform Manager LogRhythm Backup job, which runs daily. Additional backups can be configured manually within the SQL Management Studio. To perform a complete backup of a LogRhythm database:

1. Open SQL Server Management Studio on the LogRhythm server.
2. Right-click the database you wish to backup.
3. Select Tasks.
4. Select Back Up.
   The SQL Server backup dialog box opens.
5. Do the following:
   1. Select the database to be backed up (LogRhythmEMDB or master).
   2. Under backup type, select Full.
   3. Type a name and appropriate description for the backup file.
   4. Select a destination for the backup. The database can be backed up to a file or a backup device such as a tape drive. Do one of the following in the Overwrite options:
      
      • If you are backing up to a file select Overwrite existing media.
      • If you are backing up to a device select Append to media.

   5. If you schedule database backups to be performed automatically on a regular basis, make sure they are scheduled when the SQL Server is not under heavy usage.

      

      The backup time should not conflict with the Mediator Server daily maintenance jobs which have a nightly default start time of midnight. The maintenance job schedules can be viewed in the Jobs section of the SQL Server Agent in the SQL Management Studio.

For more detailed information concerning SQL Server backups see SQL Server Books Online, provided with the SQL Server installation on your LogRhythm server.