how to recover from backup config files

[011248163264]

Version

2.4.140

Installation Method

Security Onion ISO image

Description

configuration

Installation Type

Standalone

Location

on-prem with Internet access

Hardware Specs

Exceeds minimum requirements

CPU

56

RAM

128GB

Storage for /

128GB

Storage for /nsm

2TB

Network Traffic Collection

tap

Network Traffic Speeds

1Gbps to 10Gbps

Status

Yes, all services on all nodes are running OK

Salt Status

No, there are no failures

Logs

No, there are no additional clues

Detail

Hi, i have new installed version with the latest 2.4.140, so i will recover my config from the previos version, all files was backed up to the default location, i have downloaded all files local, with this manual https://docs.securityonion.net/en/2.4/backup.html.
So i have try to copy the /etc/pki and /etc/salt files to the new installation restartet the server but the elastic fleet agents are gone.

Do i have missed anything?

We have 12 elastic fleet agents, are they also in the auto backup af soc? on the future can we have maybee 100 agents or more, all agents are servers, baremetal or vm. So its important to test the recover from a fleet agent backup.
So for now we have reinstalled all agents so they can comunicate with the new installation again, but this is not a verygood solution in production.

Maybe its a good ide to implement a recovery option for all configurations.

sudo so-status = all green

[defensivedepth]

I have created an issue to track researching the feasibility of backup + restoration of Fleet / Agents.

#14470

[011248163264]

ok thanks