Skip to content
  • There are no suggestions because the search field is empty.

Available backup and restore scripts for the RSA NetWitness Platform

Issue

This article explains where to get an RSA NetWitness Disaster Recovery backup and restore script, and which version of the released scripts should be used.


Tasks

There are other unofficial backups and restore scripts prior to NetWitness 10.6.2.0, but those are not documented here.


The official RSA NetWitness backup scripts are:

  • NetWitness 11.x - nw-recovery-tool (NRT)

    Version History

    • Column 1: NetWitness 11.1 Backup and restore
      Alpha release, not officially supported by RSA Engineering

    • Column 1: NetWitness 11.0 There was no backup and restore available.

 

  • NetWitness 10.6.x - nw-backup

    Version History

    • Column 1: v4.5 NetWitness 10.6.2.0 and above, backup and restore.
      Or NetWitness 10.6.6.x, upgrade to NetWitness 11.x
      Certificate expiry checking scripts
      Superseded by v4.6 - no longer available

    • Column 1: v4.4 NetWitness 10.6.2.0 and above, backup and restore.
      Or NetWitness 10.6.6.x, upgrade to NetWitness 11.x
      Added certificate expiry checking scripts, ca-expiry-test.sh and certificate renewal scripts 10-6-cert-renewal.sh & wlc-cert-renew-10.6.sh
      Superseded by v4.5 - no longer available

    • Column 1: v4.3 NetWitness 10.6.2.0 and above, backup and restore.
      Or NetWitness 10.6.6.x, upgrade to NetWitness 11.x
      Superseded by v4.4 - no longer available

    • Column 1: v4.2 NetWitness 10.6.2.0 and above, backup and restore.
      Or NetWitness 10.6.4.x and later, upgrade to NetWitness 11.x
      Superseded by v4.3 - no longer available

    • Column 1: v4.1 NetWitness 11.x upgrade only
      Superseded by v4.2 - no longer available

    • Column 1: v4.0 NetWitness 11.1 upgrade only
      Superseded by v4.1 - no longer available

    • Column 1: v3.0 NetWitness 11.0 upgrade only
      Superseded by v4.1 - no longer available


    • Column 1: v1.0 NetWitness 10.6.2.0 and above, backup and restore
      Superseded by v2.0 - no longer available


Resolution

  • NetWitness 11.x - nw-recovery-tool (NRT) 

    The NetWitness Recovery Tool (NRT) is a CentOS 7 rpm package included from NetWitness 11.1.x and later on all NetWitness appliances.

    NetWitness 11.1.x Note: The NetWitness Recovery Tool is an initial Alpha release, it is not officially supported by RSA Engineering.  There was no official announcement for this script, and no documentation, but it can be used like the later NetWitness 11.2+ versions.

    Use the following command to confirm the NetWitness Recovery Tool rpm is installed on NetWitness 11.1.x or later.

    For example:

    # rpm -q rsa-nw-recovery-tool
    rsa-nw-recovery-tool-11.5.1.0-2009021401.5.23178da.el7.noarch


    The NetWitness Recovery Tool can be used to:

    a. Backup and restore NetWitness 11.2.x and later.
     

    The documentation on how to use the NetWitness Recovery Tool is available on the RSA Link website:


    Note: The NetWitness Recovery Tool must be run on each host system locally for backup and restore.  NRT cannot be run from a remote host.
     

There is a NetWitness 11.2+ Wrapper Script that enables the running of the NetWitness Recovery Tool (NRT) from a single server like the nw-backup can do.

Centralized Backup & Restore of NetWitness Version 11.2+  (A Wrapper Script for NRT)
 

Product Details

RSA Product Set: NetWitness Platform, Security Analytics
RSA Product/Service Type: All Appliances
RSA Version/Condition: 11.x, 10.6.x
Platform: CentOS
O/S Version: EL7, EL6

Summary

What are the available NetWitness backup and restore scripts? Which NetWitness backup and restore script should be used?


Approval Reviewer Queue

RSA NetWitness Suite Approval Queue