Splunk SOAR

Backing up for upgrade

alexander5654
New Member

Hi, my team is preparing to upgrade our phantom instance to the newest version, and I had a question regarding the backup before the update.

When I create the backup using the ibackup.pyc file, can i use that restore for a later version?

Just also making sure my understanding is correct, is all data deleted during the upgrade, or is the backup just done in case an update messes with things and allows you to restore to your previous, un-upgraded state?

Labels (1)
0 Karma

phanTom
SplunkTrust
SplunkTrust

@alexander5654 the restore will restore the entire platform state rather than just the data. Therefore it can't be used to restore to to a later version.

No data is deleted upon upgrade but a backup should be taken for any disaster type situation where a restore would be needed to a valid and recent point in time, as you alluded to in your question. 

If this helps, please mark as a solution & happy phantoming!

aocvy
Engager

What's the link to the backup documentation? 

0 Karma

phanTom
SplunkTrust
SplunkTrust
Get Updates on the Splunk Community!

[Puzzles] Solve, Learn, Repeat: Dynamic formatting from XML events

This challenge was first posted on Slack #puzzles channelFor a previous puzzle, I needed a set of fixed-length ...

Enter the Agentic Era with Splunk AI Assistant for SPL 1.4

  🚀 Your data just got a serious AI upgrade — are you ready? Say hello to the Agentic Era with the ...

Stronger Security with Federated Search for S3, GCP SQL & Australian Threat ...

Splunk Lantern is a Splunk customer success center that provides advice from Splunk experts on valuable data ...