Point-in-Time Recovery

MediumLevel 1Manual reviewoceanbase

Description

With clogs it is possible to implement point-in-time recovery. This makes it possible to restore the changes between the last full backup and the point-in-time. The clogs need to be backed up with data backup. The restore procedure should be created and tested.

How it is checked

Audit method: Manual review

This recommendation cannot be checked automatically. A scan lists it with these instructions when you pass --include-manual.

Verify that clog (log) backup is enabled and that a restore procedure exists: - If OceanBase Cloud Platform (OCP) is used, review the tenant-level backup configuration and confirm that log backup is explicitly enabled as part of the backup strategy. - Additionally, examine operational documentation or disaster recovery plans to confirm that a point-in-time recovery procedure has been defined and tested within the past 12 months (or per organizational policy).

How it is fixed

Fix method: Guidance or infrastructure patch

Enable clog backup and establish a recovery validation process: - In OceanBase Cloud Platform (OCP), modify the tenant's backup policy to enable the Log Backup feature. Ensure the log backup destination is reliable and monitored. - Develop a formal point-in-time recovery procedure that outlines how to restore from a full backup and replay clogs to a specified timestamp.

Properties

Operating systems: Any
Tags: oceanbasebackup
Reference: CIS OceanBase Enterprise Edition V4 Benchmark v1.0.0 - 3.1.4 Point-in-Time Recovery