restore
Use this command to:
- restore the configuration or database from a file
- change the FortiAnalyzer unit image
- Restore device logs, DLP archives, and reports from specified servers.
This command will disconnect all sessions and restart the FortiAnalyzer unit.
Syntax
execute restore all-settings {ftp | sftp} <ip:port> <filename> <username> <password> [<crptpasswd>] [option1+option2+...]
execute restore all-settings scp <ip> <filename> <username> <ssh-cert> [<crptpasswd>] [option1+option2+...]
execute restore image ftp <filepath> <ip:port> <username> <password>
execute restore image tftp <filename> <ip>
execute restore logs <device name(s)> {ftp | scp | sftp} <ip> <username> <password> <directory> [vdlist]
execute restore logs-only <device name(s)> {ftp | scp | sftp} <ip> <username> <password> <directory> [vdlist]
execute restore reports <report name(s)> {ftp | scp | sftp} <ip> <username> <password> <directory> [vdlist]
execute restore reports-config {<adom_name> | all]} {ftp | scp | sftp} <ip> <username> <password> <directory> [full]
all-settings
|
Restore all FortiAnalyzersettings from a file on a FTP, SFTP, or SCP server. The new settings replace the existing settings, including administrator accounts and passwords.
|
image
|
Upload a firmware image from an FTP or TFTP server to the FortiAnalyzer unit. The FortiAnalyzer unit reboots, loading the new firmware.
|
logs
|
Restore device logs and DLP archives from a specified server.
|
logs-only
|
Restore device logs from a specified server.
|
reports
|
Restore reports from a specified server.
|
reports-config
|
Restore report configurations to a specified server.
|
ftp
|
Restore from an FTP server.
|
sftp
|
Restore from a SFTP server.
|
scp
|
Restore from an SCP server.
|
<ip:port>
|
Enter the IP address of the server to get the file from and optionally , for FTP servers, the port number.
|
<ip>
|
Enter the server IP address.
|
<device names>
|
Device name or names, separated by commas, or all for all devices. Example: FWF40C3911000061
|
<report name(s)>
|
Restore specific reports (separated by commas), all for all reports, or reports with names containing given pattern.
A '? ' matches any single character.
A '* ' matches any string, including the empty string, e.g.:
-
foo : for exact match
-
*foo : for report names ending with foo
-
foo* : for report names starting with foo
-
*foo* : for report names containing foo substring.
|
{<adom_name> | all]}
|
Select to backup a specific ADOM or all ADOMs.
|
<filename>
|
Enter the file to get from the server. You can enter a path with the filename, if required.
|
<filepath>
|
Enter the file path on the FTP server.
|
<username>
|
The username to log on to the server. This option is not available for restore operations from TFTP servers.
|
<password>
|
Enter the password, or - if there is no password..
|
<ssh-cert>
|
Enter the SSH certificate used for user authentication on the SCP server.
|
[<crptpasswd>]
|
Optional password to protect backup content. Use any for no password.
|
[option1+option2+...]
|
Enter keepbasic to retain IP and routing information on the original unit.
|
<directory>
|
Enter the directory.
|
[full]
|
Reports configuration full restoration.
|
Example
This example shows how to upload a configuration file from a FTP server to the FortiAnalyzer unit. The name of the configuration file on the FTP server is backupconfig
. The IP address of the FTP server is 192.168.1.23. The user is admin
with a password of mypasword
. The configuration file is located in the /usr/local/backups/
directory on the FTP server.
execute restore all-settings ftp 192.168.1.23 /usr/local/backups/backupconfig admin mypasword