Submit a ticketCall us

Solarwinds & Cisco Live! Barcelona
Join us from the 29th of January to the 2nd of February at Cisco Live 2018 in Barcelona, where we will continue to show how monitoring the network with SolarWinds will keep you ahead of the game. At our booth (WEP 1A), we will demonstrate how SolarWinds network solutions can help. As a bonus, we are also hosting a pre-event webinar - Blame the Network, Hybrid IT Edition with our SolarWinds Head Geek™, Patrick Hubbard on January 24th - GMT (UTC+0): 10:00 a.m. to 11:00 a.m. There's still time to RSVP.

Home > Success Center > Log & Event Manager (LEM) > Configure Backups on your LEM Appliance

Configure Backups on your LEM Appliance

Created by Interspire Import, last modified by Tim Rush on Nov 29, 2016

Views: 5,270 Votes: 6 Revisions: 19

You can configure your LEM appliance to run scheduled backups according to your requirements and preferences.

Backup types

This section describes the three primary LEM backup options. The procedure for scheduling these backups is the same. 

You cannot merge backup data with live data at this time. Use these backups for data retention and disaster recovery only.


Schedule or run this backup to back up the normalized alert (default) database on your LEM appliance. Since it backs up everything on the database, this backup file grows as your database grows. The entire contents of the database on the LEM will be backed up the first time this is configured and run. Each subsequent backup performs an incremental backup to the network share. If you have a separate LEM appliance dedicated to this database, schedule or run this backup on the dedicated database appliance.
Note: if the database backup on the network share is moved or deleted, the entire contents of the LEM database will be backed up at the next interval. You can manually move or archive the oldest partitions on the network share.

Recommended schedule: Daily
File Name: SolarWindsLEMAlertDBArchive


Schedule or run this backup to back up all configuration settings on your LEM appliance. These settings include all user-defined groups, rules, scheduled nDepth searches and users. This backup does not back up any database log data. During initial LEM deployment, we recommend daily or weekly backups, but once can be extended after ther LEM is fully deployed and changes are infrequent.

Recommended schedule: Weekly
File Name: TriGeoBackup


Schedule or run this backup to back up the original syslog data on your LEM appliance. The syslog data is a temporary holding place for data, containing data from a few hours up to 100 days maximum, depending upon how the log rotatation is set. This backup is optional since archiveconfig backs up the corresponding alert database.

Recommended schedule: Weekly or Monthly, if used
File Name: TriGeoLogBackup

Schedule or run a backup on your LEM appliance

The procedures are the same for scheduling and running each of the LEM appliance backups. Below are the options you can select for your backup. 

# Option Description
1 daily Perform daily full backup at 6:25AM
2 weekly Perform weekly full backup Sunday at 6:47AM
3 monthly Perform monthly full backup the first of the month at 6:52AM
4 never Unschedule any configured backup
5 once Run a one-time backup
6 exit Exit configuration

To schedule or run a backup:

  1. Connect to your LEM virtual appliance using either the vSphere "console" view, or an SSH client (such as PuTTY).
  2. If you are using an SSH client, log in to your LEM virtual appliance using your CMC credentials.
  3. At the cmc> prompt, enter manager.
  4. At the cmc::cmm prompt, enter the name of the backup you want to schedule or run. You can select  archiveconfig, backupconfig, or logbackupconfig.
  5. Press Enter to start the backup script.
  6. Review the current backup settings, and then enter the number that corresponds to the option you want to choose.
  7. Enter y to confirm your selection.
  8. Enter and confirm the file location, user account, and password information you want your LEM appliance to use for the scheduled backups.
    • Enter the file location in UNC format (for example, \\server\share). If your LEM appliance cannot resolve host names, use the server's IP address instead.
    • SolarWinds recommends that you provide a service account for the LEM appliance to use to run backups. Otherwise, you will have to update your backup settings every time the user's password changes.
    • The user you provide in this procedure must have write permissions to the share used for the backups.
  9. If you want to run the backup immediately, enter y when prompted. SolarWinds recommends that you only run archiveconfig and logbackupconfig during off-peak hours, as they can be very resource intensive.

Each time the backups run, your LEM manager displays an alert similar to the following in the default SolarWinds Alerts filter.

Alert Name: InternalInfo
EventInfo: ManagerMonitor Info: Backup Done with backup. InsertionIP: gman Manager: gman DetectionIP: InsertionTime: 10:11:26 Mon Jan 30 2012 DetectionTime: 10:11:25 Mon Jan 30 2012 Severity: 2 ToolAlias: Manager Monitor InferenceRule: ProviderSID: ManagerMonitor Manager Backup Info ExtraneousInfo: DUMP: Date of this level 0 dump: Mon Jan 30 09:30:32 201


Last modified