Syslog-ng PE does not have a primary backup procedure, rather, copying certain files and/or directories are sufficient enough for a successful backup of the Syslog-ng PE server.
The items required for a basic successful backup are:
1.) The primary syslog-ng.conf file (and any additional configuration files if separate configuration files have been used).
2.) The primary wec.yaml file, if using the Windows Event Collector service
3.) Any certificates used by the Syslog-ng PE service.
The best way to backup these items is to make a copy of the following directory recursively in it's entirety with all files and subdirectories:
If the standard location has not been used for Syslog-ng PE, please specify the /etc directory under the syslog-ng directory where that directory has been created.
If Syslog-ng PE has been configured to use certificates and those certificates are not located in the standard /opt/syslog-ng/etc/tls directory, please ensure to include them separately.