Restore an archived folder in Cortex XSOAR from data archives and condensed folders.
Follow these steps to restore a folder that was previously archived.
Note
You may not be able to restore folders archived from a different Cortex XSOAR version due to database changes between the versions.
Stop the Cortex XSOAR service using the appropriate command for your OS.
systemctl stop demisto
sudo service demisto stop
Navigate to the
/var/lib/demisto
filepath using the following command.cd /var/lib/demisto
(Multi-tenant) - For multi-tenant deployments, go to /var/lib/demisto/tenants/
acc_{TENANT_NAME}
.Create a directory named
archive
using the following command.mkdir archive
Restore the folder using the following command, where
folderName
is the name of the folder to restore.tar -C
folderName
-xvzf archiveMove the idx data back to the original
demistoidx
folder using the following command.mv archive/*2017 data/demistoidx
Move the partitions back to the original
partitionsData
folder using the following command.mv archive/*2017.db data/partitionsData
Start the Cortex XSOAR service using the appropriate command for your OS.
systemctl start demisto
sudo service demisto start