Soar - ibackup --setup failed "files exist but do not match the database" after upgrading to SOAR 6.2.0

Applicability

Splunk SOAR 6.2.0

Description

When running the "<PHANTOM_HOME>/bin/phenv ibackup --setup", it gave the following error:
 

$phenv ibackup --setup
Command '['pgbackrest', '--stanza=phantom', '--config=/opt/phantom/etc/pgbackrest.conf', '--log-level-console=info', '--log-level-file=info', 'stanza-create']' returned non-zero exit status 28.
Output: 2023-12-06 18:29:28.329 P00 INFO: stanza-create command begin 2.46: --config=/opt/phantom/etc/pgbackrest.conf --exec-id=9284-b852b45e --log-level-console=info --log-level-file=info --log-path=/opt/phantom/var/log/phantom/backup --pg1-path=/opt/phantom/data/db --pg1-socket-path=/tmp --repo1-path=/opt/phantom/data/ibackup/repo/pg --stanza=phantom
2023-12-06 18:29:28.937 P00 INFO: stanza-create for stanza 'phantom' on repo1
ERROR: [028]: backup and archive info files exist but do not match the database
HINT: is this the correct stanza?
HINT: did an error occur during stanza-upgrade?
2023-12-06 18:29:28.956 P00 INFO: stanza-create command end: aborted with exception [028]
Error output: None

Investigation

The issue is caused by pgbackrest writing an archive.info file on setup which is locked to the Postgres version at time of generation. SOAR 6.2.0 upgraded to Postgres 15. The SOAR upgrade does not delete/update this file which caused the version mismatch.

Resolution

There is a workaround:

• Delete the old pgbackrest folder: 

 rm -r <PHANTOM_HOME>/data/ibackup/repo

• Rerun ibackup setup:

  phenv ibackup --setup

Revision History

Revision	Publish Date	Comments
1.0	29-Sep-2026	Initial Release