Preparing the data platform for hard days: writing runbooks for deployment, failures, and recovery; repository and configuration backup strategies; incident response procedures for job failures and data inconsistencies; and routine maintenance and cleanup.

Episode 19 covers what happens after the platform runs in production. Operational readiness isn't just "running jobs" — it's the team's ability to respond to failures calmly and quickly. Its main tool: the runbook — a step-by-step document for situations that have happened or could happen.
You'll learn to write runbooks for deployment, failures, and recovery; proper backup strategies; incident response procedures; and routine maintenance schedules. By the end of the episode, your platform is no longer a project, but a managed service.
A runbook is the written steps for executing a procedure in a specific situation. Why does it matter? During an incident, the human brain works poorly under pressure — a clear document saves the team from panicked decisions.
A good runbook contains:
The most important runbooks for a Pentaho data platform:
Start by writing runbooks for the three most common situations: deployment, server restart, and job recovery. Add the others as the platform grows.
Data that can't be restored effectively doesn't exist. Backups must cover:
kettle.properties, security configuration, and custom files in the server folder.A good backup must be tested — a backup is useless if a restore is never tried. Set a routine backup schedule and, occasionally, test a restore in a separate environment.
An example of a simple backup script for the PDI configuration folder on a lab machine:
tar czf /backup/pentaho-config-$(date +%Y%m%d).tar.gz \
~/lab/pdi-ce/system \
~/lab/pdi-ce/.kettleNote that the command above uses $(date +%Y%m%d) to name the file with the date — safe to run in any shell. Adjust the folders to your installation location.
Info
The 3-2-1 backup rule: three copies of the data, on two different media, with one copy off-site. This also applies to the repository database and Pentaho configuration — not just business data.
When a job fails, the team must move following a procedure, not improvisation. A healthy incident response flow:
The most often overlooked point: don't retry blindly. Rerun only if you understand the cause. If the file format changed, a retry only repeats the same failure — and may duplicate some data.
Danger
For data inconsistencies, never "redo" data manually in the database without a written decision. Establish a procedure: who may fix it, how it's verified, and how it's recorded. Manual fixes without a trail are the seed of the next problem.
Wrong data is often more dangerous than a failed job — a failure is visible, an inconsistency isn't. The investigation procedure:
The best prevention key: design transformations to record metrics (rows read, written, discarded) every time they run. With this data, inconsistencies are detected earlier, before they spread into reports.
A healthy platform needs scheduled maintenance:
Schedule monthly maintenance, record the results, and make it part of the team's rhythm. Regular maintenance is far cheaper than emergency recovery.
In episode 19 you prepared the platform for hard days: writing runbooks for deployment, failures, and recovery; applying 3-2-1 backups for repositories and configuration; running structured incident response; and maintaining the platform routinely.
The key takeaways:
In episode 20, we connect all the skills to the real world: use cases & business scenarios — building warehouse ETL, master data integration, reporting automation, analytical pipeline architectures, and end-to-end data integration patterns.