Backup NetMon Components
This section contains information about backing up various NetMon components. You should always backup components before upgrading or installing a new version of NetMon (for example, before installing NetMon version 5.0.0).
Dashboards
To backup NetMon dashboards, from the Dashboard view:
Click the Management icon to enter the NetMon-UI management.
Click Saved Objects.
Check the box next to each dashboard you want to save.
You can use the filters to only show Dashboards on this screen.
Click Export to download the selected dashboards.
Rules
Each NetMon rule needs to be manually exported and saved. To export and save rules:
Navigate to the Rules page.
Complete the following steps depending on the type of rules you want to save:
Rule Type | Steps to Backup |
---|---|
Query Rules | Copy and paste each rule in the table you want to save into a new file. |
Deep Packet Analytics Rules | Click the Download action under each Custom DPA Rule you want to backup. |
Configuration Settings
At this time, NetMon does not have the ability to backup configuration settings. We recommend making note of all settings under the Configuration tab so they can be re-implemented after an install/upgrade. The most important tabs to record the configuration of for quick re-deployment are:
Syslog (screenshot/record all details on page)
Network (screenshot/record all IP configurations, which interfaces are assigned to which roles, etc.)
Time (record both NTP servers)
Capture (screenshot/record existing settings)
Filter (screenshot/record if any non-default settings exist)
Users (record if any non-default users have been added)
Unless you made changes to the Engine section, the default Engine configuration settings will remain when you re-install NetMon.
PCAP Files
PCAP files normally have a very short life span; however, if it is necessary to keep a copy of the PCAPs, you’ll have to download each file either from the NetMon Web UI or using the NetMon API.
NetMon Web UI
To backup PCAP files from the NetMon Web UI:
Login to the NetMon UI and switch to the Dashboard called Capture Dashboard.
Select the Download icon in the Captured column to download the PCAP files.
NetMon API
To backup PCAP files using the NetMon API:
Follow the instructions detailed on the LogRhythm NetMon API page for the /pcap/actions/download endpoint.
Send an API request for each session ID you’d like to backup.