Kaspersky Next XDR Expert

Backup copying and restoration of KUMA Core under Kaspersky Next XDR Expert

You can create a backup copy of KUMA Core and restore it from the backup copy, if needed.

Creating a backup copy of KUMA Core

To create a backup copy of KUMA Core, run one of the following commands:

• If you want to create a backup copy with the default name:

  ./kdt invoke kuma --action backup

  The default name of the backup copy contains the creation date and time, such as kuma-backup-YYYY-MM-DDTHH_MM_SS.tar.gz.

• If you want to create a backup copy with a custom name:

  ./kdt invoke kuma --action backup --of kuma_backup_output_file=./<custom name of kuma backup copy>-{{.Date}}.tar.gz

By default, the backup copy is created in the current directory of administrator host.

Restoring KUMA Core from a backup copy

You may need to restore KUMA Core from a backup copy when KUMA Core is available, but some data is lost, services are missing, or are not working properly.

To restore KUMA Core from a backup copy:

1. Place the backup copy on the host where you plan to restore the backup.
2. Specify the backup copy name in the kuma_backup_file parameter, and then run the following command:

   ./kdt invoke kuma --action restore --if kuma_backup_file=./kuma-backup-YYYY-MM-DDTHH_MM_SS.tar.gz

3. If you need to force-clean the files from the /opt/kaspersky/kuma directory on KUMA Core before you restore it from the backup copy, specify the parameter clean_restore=true explicitly:

   ./kdt invoke kuma --action restore --if kuma_backup_file=./kuma-backup-YYYY-MM-DDTHH_MM_SS.tar.gz --param clean_restore=true

KUMA Core is restored from a backup, along with the related data.

Reinstalling KUMA Core by using a backup copy

You may need to reinstall KUMA Core by using a backup copy created in the current deployment of Kaspersky Next XDR Expert in the following cases:

• KUMA Core is unavailable or corrupted.
• KUMA Core components in the cluster are corrupted or removed.
• The KUMA Core database is unavailable.

To install KUMA Core by using the backup file:

1. Run the following command:

   ./kdt apply -k kuma_<kuma version number>.tar --accept-eula -p --force --if kuma_backup_file=./kuma-backup-YYYY-MM-DDTHH_MM_SS.tar.gz

   You cannot use a backup copy for KUMA standalone for this purpose.

   As a result, the KUMA Core cluster components and executed files are restored, and files with current certificates for the services on host with external KUMA services are removed from the inventory file. The KUMA Core database is restored in the cluster.

2. After the command is executed, go to KUMA Console, select the Active services section, and then reset the certificates for all external services. The new certificates are issued and the services are connected to KUMA Core under Kaspersky Next XDR Expert.

KUMA Core is reinstalled by using the backup file.