restore
Use this command to:
- restore the configuration or database from a file
- change the FortiAnalyzer unit image
- Restore device logs, DLP archives, and reports from specified servers.
This command will disconnect all sessions and restart the FortiAnalyzer unit.
Syntax
execute restore all-settings {ftp | sftp} <ip:port> <filename> <username> <password> [<crptpasswd>] [option1+option2+...]
execute restore all-settings scp <ip> <filename> <username> <ssh-cert> [<crptpasswd>] [option1+option2+...]
execute restore image ftp <filepath> <ip:port> <username> <password>
execute restore image tftp <filename> <ip>
execute restore logs <device name(s)> {ftp | scp | sftp} <ip> <username> <password> <directory> [vdlist]
execute restore logs-only <device name(s)> {ftp | scp | sftp} <ip> <username> <password> <directory> [vdlist]
execute restore reports <report name(s)> {ftp | scp | sftp} <ip> <username> <password> <directory> [vdlist]
execute restore reports-config {<adom_name> | all]} {ftp | scp | sftp} <ip> <username> <password> <directory> [full]
all-settings |
Restore all FortiAnalyzersettings from a file on a FTP, SFTP, or SCP server. The new settings replace the existing settings, including administrator accounts and passwords. |
image |
Upload a firmware image from an FTP or TFTP server to the FortiAnalyzer unit. The FortiAnalyzer unit reboots, loading the new firmware. |
logs |
Restore device logs and DLP archives from a specified server. |
logs-only |
Restore device logs from a specified server. |
reports |
Restore reports from a specified server. |
reports-config |
Restore report configurations to a specified server. |
ftp |
Restore from an FTP server. |
sftp |
Restore from a SFTP server. |
scp |
Restore from an SCP server. |
<ip:port> |
Enter the IP address of the server to get the file from and optionally , for FTP servers, the port number. |
<ip> |
Enter the server IP address. |
<device names> |
Device name or names, separated by commas, or all for all devices. Example: FWF40C3911000061
|
<report name(s)> |
Restore specific reports (separated by commas), all for all reports, or reports with names containing given pattern.
A '? ' matches any single character.
A '* ' matches any string, including the empty string, e.g.:
-
foo : for exact match
-
*foo : for report names ending with foo
-
foo* : for report names starting with foo
-
*foo* : for report names containing foo substring.
|
{<adom_name> | all]} |
Select to backup a specific ADOM or all ADOMs. |
<filename> |
Enter the file to get from the server. You can enter a path with the filename, if required. |
<filepath> |
Enter the file path on the FTP server. |
<username> |
The username to log on to the server. This option is not available for restore operations from TFTP servers. |
<password> |
Enter the password, or - if there is no password.. |
<ssh-cert> |
Enter the SSH certificate used for user authentication on the SCP server. |
[<crptpasswd>] |
Optional password to protect backup content. Use any for no password. |
[option1+option2+...] |
Enter keepbasic to retain IP and routing information on the original unit. |
<directory>
|
Enter the directory.
|
[full]
|
Reports configuration full restoration.
|
Example
This example shows how to upload a configuration file from a FTP server to the FortiAnalyzer unit. The name of the configuration file on the FTP server is backupconfig
. The IP address of the FTP server is 192.168.1.23. The user is admin
with a password of mypasword
. The configuration file is located in the /usr/local/backups/
directory on the FTP server.
execute restore all-settings ftp 192.168.1.23 /usr/local/backups/backupconfig admin mypasword