About default scheduled backups in ITE Work
The default scheduled backup is a full backup of your environment that runs daily at 1:00 AM in the server's local time zone. The time of the backup job is displayed on the Backup/Restore Jobs page. You can't create additional scheduled backup jobs.
The following limits apply to keeping scheduled backup files in the backup history:
- A minimum of 7 days if running a daily scheduled backup
- A minimum of 14 days if running a weekly scheduled backup
- A maximum of 30 days for all scheduled backup files
The oldest backup file is automatically deleted from the backup history after the retention time expires. To set the schedule and retention time period for scheduled backups, edit the settings as defined in the next section.
Edit the default scheduled backup
When you edit the default scheduled backup, you can change its name, frequency, and time to run. You can also set how many days to keep the backup file, or disable the scheduled backup. But you can't delete the scheduled backup job.
Prerequisites
You must have the itoa_admin role to view and edit the settings for the default scheduled backup job.
Steps
- From the main menu, click Configuration > Backup/Restore.
- Open the Default Scheduled Backup.
- (Optional) Enable Include .conf files to back up the following configuration files located in
$SPLUNK_HOME/etc/apps/SA-ITOA/local
and$SPLUNK_HOME/etc/apps/itsi/local
:- alert_actions.conf
- app_common_flags.conf
- commands.conf
- deep_dive_drilldowns.conf
- glasstable_icon_library.conf
- inputs.conf
- itsi_settings.conf
- limits.conf
- macros.conf
- notable_event_actions.conf
- savedsearches.conf (only in
$SPLUNK_HOME/etc/apps/SA-ITOA/local
)
ITE Work only backs up these .conf files if they exist in a non-default directory, such as
$SPLUNK_HOME/etc/apps/itsi/local
. For more information, see About configuration files in ITSI. When restored, the backed up .conf file overrides the existing local version. - Select a daily or weekly schedule, including the time, to run the scheduled backup. The default setting runs the backup job daily at 1:00 AM in the server's local time zone.
- Set the number of days you want to keep the backup file. The oldest backup file automatically disappears from the backup history after the retention time expires.
- Click Save.
Overview of backing up ITE Work KV store data | Create a full backup of ITE Work |
This documentation applies to the following versions of Splunk® IT Essentials Work: 4.17.1, 4.18.0, 4.18.1, 4.19.0, 4.19.1
Feedback submitted, thanks!