Export and Import the ATA Configuration

Applies to: Advanced Threat Analytics version 1.9

The configuration of ATA is stored in the "SystemProfile" collection in the database. This collection is backed up every 4 hours by the ATA Center service to files called: SystemProfile_timestamp.json. The 300 most recent versions are stored. This file is located in a subfolder called Backup. In the default ATA installed location it can be found here: C:\Program Files\Microsoft Advanced Threat Analytics\Center\Backup\SystemProfile_timestamp.json.

Note: It is recommended that you back up this file somewhere when making major changes to ATA.

It is possible to restore all the settings by running the following command:

mongoimport.exe --db ATA --collection SystemProfile --file "<SystemProfile.json backup file>" --upsert

See Also