Back up data - From the Cortex XSOAR tenant, perform scheduled backups and on-demand backup and restore of Cortex XSOAR data. - Administrator Guide - 8.13 - Cortex XSOAR - Cortex - Security Operations

Cortex XSOAR On-prem Documentation
Product
Cortex XSOAR
Version
8.13
Creation date
2026-02-12
Last date published
2026-05-27
Category
Administrator Guide
Solution
On-prem
Abstract

From the Cortex XSOAR tenant, perform scheduled backups and on-demand backup and restore of Cortex XSOAR data.

Perform one-time backup or schedule recurring backup. The backup process can take several minutes.

The data that is backed up is comprised of objects metadata and volume data. Both are encrypted.

How to back up data

  1. Navigate to Settings & Info → Settings → System → Backup and Restore → Backup tab.

  2. View or configure the following.

    Fields

    Details

    Last successful backup

    Shows the date and time of the latest backup.

    Enable scheduled backups

    Enabled by default. if disabled, you can configure an on-demand backup.

    Backup now

    An additional option for on-demand backup. When you click it, you just configure external storage details and the relative path for the one-time backup.

    Choose External Storage

    Select an external storage. You can view the saved external storage options under Settings & Info → Settings → System → External Storage.

    Relative Path

    Set the location within the specified external storage system where the backup files will be stored. The full path is also shown.

    Backup schedule details

    Options are Daily, Weekly, or Monthly. You can select a day of the week to back up only for weekly backup.

    Choose the backup time (hours and minutes) in Server time. Server time may be different than your local time. You can check via ssh with the viewer user.Retention time.

    These fields do not appear for on-demand backup.

    Save

    Initiate the backup.

(AWS storage only) Delete snapshots of backed up nodes you delete

If you back up to an S3 bucket, AWS creates a snapshot of the node (virtual machine). If you subsequently delete the node, you also need to delete the snapshot.