Aggregator CLI Commands

aggregator backup keys file

Use this command to back up the shared secret keys file to the specified location.

Syntax

aggregator backup keys file <user@host:/path/filename>

Parameters

user@host:/path/filename For the file transfer operation, specifies a user, host, and full path name for the backup keys file. The user you specify must have the authority to write to the specified directory.

Notes

For more information about the shared secret use, see System Shared Secret.

aggregator clean shared-secret

Sets the system shared secret value to null. All files archived or exported from a unit with a null shared secret can be restored or imported only on systems where the shared secret is null.

Syntax

aggregator clean shared-secret

Notes

For more information about the shared secret use, see System Shared Secret.

aggregator debug

Starts or stops writing debugging information relating to aggregation activities. Use these commands only when directed to do so by Guardium Support, and be sure to issue the stop command after you have gathered enough information.

Syntax

aggregator debug <start | stop>

aggregator list failed imports

When an import operation fails because of a shared secret mismatch, the offending file is moved from the /var/importdir directory to the /var/dump directory, and it is renamed using the original file name plus the suffix .decrypt_failed. Use this command to list all such files

Syntax

aggregator list failed imports

aggregator list failed restore

When a restore operation fails because of a shared secret mismatch, the offending file is moved from the /var/importdir directory to the /var/dump directory, and it is renamed using the original file name plus the suffix .decrypt_failed. Use this command to list all such files.

Syntax

aggregator list failed restore

aggregator recover failed import

Use this command to move and rename failed import files, prior to re-attempting an import or restore operation. Failed import files are stored in the /var/dump directory, with the suffix .decrypt_failed. Before re-attempting an import or restore operation, those files must be renamed (by removing the .decrypt_failed suffix) and moved to the /var/importdir directory.

Syntax

aggregator recover failed import <all | filename>

Parameters

Use the all option to move all files from the /var/dump directory ending with the suffix .decrypt_failed, or use the filename option to identify a single file to be moved.

Notes

After moving the failed files, but before a restore or import operation runs, be sure that the system shared secret matches the shared secret used to encrypt the exported or archived file.

aggregator recover failed restore

Use this command to move and rename failed restore files, prior to re-attempting a restore operation. Failed restore files are stored in the /var/dump directory, with the suffix .decrypt_failed. Before re-attempting a restore operation, those files must be renamed (by removing the .decrypt_failed suffix) and moved to the /var/importdir directory.

Syntax

aggregator recover failed restore <all | filename>

Parameters

Use the all option to move all files from the /var/dump directory ending with the suffix .decrypt_failed, or use the filename option to identify a single file to be moved.

Notes

After moving the failed files, but before a restore operation runs, be sure that the system shared secret matches the shared secret used to encrypt the exported or archived file.

aggregator restore keys file

Use this command to restore the shared secret keys file from the specified location.

Syntax

aggregator restore keys file <user@host:/path/filename>

Parameters

user@host:/path/filename For the file transfer operation, specifies a user, host, and full path name for the backup keys file.

Notes

For more information about the shared secret use, see System Shared Secret.