Skip to content

How to restore data from archive

Restore archived events into an online or archive repository by creating an Import job.

Authentication

To access the web interface, open a browser and enter the application's IP address or DNS name (for example, https://CyberquestIPAddress). The browser redirects to the CYBERQUEST authentication page:

Login page

To create a new job, go to Settings > Jobs and select Jobs.

Settings > Jobs > Jobs

This page contains all job types added in the CYBERQUEST application.

Jobs list

Edit job: click Edit Edit button button, similar to adding a job.

Start job: click Start Start button. Track status on the Job Executions page.

Delete job: click Delete button and confirm.

To mark a job as activate/inactivate, press Active toggle button.

Create an import job

Click the add button Add job button to open the new job form.

Import job form

Job fields:

  • Name: Display name shown in the Jobs list

  • Description: Short description of the restore/import operation

  • Server: Data server where the job runs

  • Job Type: Select Import job

    • Import job: Imports events from a source repository (archive) into an online or archive repository; useful for consolidation or decommissioning obsolete repositories
  • Data Storage: Source data storage (archive) where events are read from

  • Where to Import: Destination repository (online or offline) where events are written

  • Period Spec. Type: Choose Start & End Date or Last 'x' units

    • Start Date / End Date: Exact time window to import
    • Last 'x' units: Rolling window by seconds, minutes, hours, days, months, or years
  • Use Filters: Add one or more AND/OR filter groups built under Rules > Filter Rules to restrict which events are imported

  • Active: Mark the job active or inactive

When finished, click Save to apply changes or Cancel to discard.

Verify the job execution

Open Job Executions from the Jobs page using the Job Executions button: Job Executions

Job executions list

Confirm the job status is completed and review the number of processed and imported events.