We recommend archiving artifacts and attachments to facilitate migration and data recovery processes.
Locate the folders that reside in the following location (where Cortex XSOAR is installed),
Although the folders reside in
/var/lib/demisto/attachments/, DO NOT save the backup folders under
Follow these steps to create artifact and attachment archive folders.
Stop the Cortex XSOAR service using the following command.
$ sudo service demisto stop
Create directories to hold the archived artifacts and attachments. For example:
mkdir -p /var/lib/demisto-archive/artifacts
mkdir -p /var/lib/demisto-archive/attachments
Navigate to the
Find the artifacts and attachments you want to save and compress in the archive directories. For example, the following commands archive artifacts and attachments that are older than 250 days.
find /var/lib/demisto/artifacts -type f -mtime +250 | xargs -I% sh -c 'tar -rvf artifacts/artifactsArchive.tar.gz % && rm %'
find /var/lib/demisto/attachments -type f -mtime +250 | xargs -I% sh -c 'tar -rvf attachments/attachmentsArchive.tar.gz % && rm %'
Start the Cortex XSOAR service.
$ sudo service demisto start