Follow these steps to restore a folder that was previously archived.
You may not be able to restore folders archived from a different Cortex XSOAR version due to database changes between the versions.
Stop the Cortex XSOAR service using the appropriate command for your OS.
systemctl stop demisto
sudo service demisto stop
Navigate to the
/var/lib/demistofilepath using the following command.
(Multi-tenant) - For multi-tenant deployments, go to
Create a directory named
archiveusing the following command.
Restore the folder using the following command, where
folderNameis the name of the folder to restore.
Move the idx data back to the original
demistoidxfolder using the following command.
mv archive/*2017 data/demistoidx
Move the partitions back to the original
partitionsDatafolder using the following command.
mv archive/*2017.db data/partitionsData
Start the Cortex XSOAR service using the appropriate command for your OS.
systemctl start demisto
sudo service demisto start