Restore an Archived Folder - Restore an archived folder in Cortex XSOAR. - Administrator Guide - 6.13 - Cortex XSOAR - Cortex - Security Operations

Stop the Cortex XSOAR service using the appropriate command for your OS.

Navigate to the /var/lib/demisto filepath using the following command.

cd /var/lib/demisto

(Multi-tenant) - For multi-tenant deployments, go to /var/lib/demisto/tenants/acc_{TENANT_NAME}.

Create a directory named archive using the following command.

mkdir archive

Restore the folder using the following command, where folderName is the name of the folder to restore.

tar -C folderName -xvzf archive

Move the idx data back to the original demistoidx folder using the following command.

mv archive/*2017 data/demistoidx

Move the partitions back to the original partitionsData folder using the following command.

mv archive/*2017.db data/partitionsData

Start the Cortex XSOAR service using the appropriate command for your OS.