Skip to content
  • There are no suggestions because the search field is empty.

SASE Restore

Tags: Documentation

Deployed SASE Nodes can be restored if the deployed SASE NetWitness Node is in an unrecoverable state. To recover/restore a previously deployed SASE NetWitness Cloud Node, the node’s configuration must have been previously backed up in the /root/.sase/backups/ directory using the nw-create-cloud-hybrid --backup-cloud-nodes command, and the instance must be completely removed/deleted from the cloud provider project. Additionally, the node must still exist in the NetWitness Configuration (see nw-manage --l). The nw-create-cloud-hybrid script has a --restore-cloud-node option that will utilize the underlying NetWitness recovery capability and facilitate the automated restoration of a cloud based NetWitness node. The following command must be executed using the nw-create-cloud-hybrid script on the Admin Server:

nw-create-cloud-hybrid --restore-cloud-node
or
nw-create-cloud-hybrid --r

  • Options:

    --uuid

  • Description:

    UUID of the specific node (Required)


  • Options: --deployment-model
  • Description:

    Optional Name of deployment model in template

    defaults to pre-defined 'gcp default'


  • Options: --cloud-key-path
  • Description:

    Optional Cloud Service Account Json-based key data path

    GCP will default to /root/.gcp/gcp-auth-token.json


This command will recreate the previously deployed SASE based cloud instance and apply the configuration of that node based on the last backup available in the /root/.sase/backups directory.

Note: This process only restores one node based on the required --uuid parameter. The uuid for a specific node can be found using the nw-manage --l command.