Instructions for how to restore from backups

[Syngelik]

Version

2.4.111

Installation Method

Security Onion ISO image

Description

installation

Installation Type

Standalone

Location

airgap

Hardware Specs

Exceeds minimum requirements

CPU

24

RAM

64G

Storage for /

500G

Storage for /nsm

48T

Network Traffic Collection

tap

Network Traffic Speeds

1Gbps to 10Gbps

Status

Yes, all services on all nodes are running OK

Salt Status

No, there are no failures

Logs

No, there are no additional clues

Detail

I had a weird issue as noted in #14164 - making more sense to rebuild and backup from /nsm/backup. Are there explicit instructions where to move these files to or untar? My detection overrides don't seem to be working and changes made to the config in the web gui don't seem to be applying consistently.

Guidelines

• I have read the discussion guidelines at Read before posting! #1720 and assert that I have followed the guidelines.

[rh-ops]

Here's a list of instructions for restoring from backup you can try.

#14040 (comment)

[Syngelik]

Thanks, I will try this - can you confirm the directory the suricata overrides should be?