End-to-end example of Cortex XSOAR cluster backup and restore - Example workflow for backup and restore in the Cortex XSOAR tenant. - Administrator Guide - 8.13 - Cortex XSOAR - Cortex - Security Operations

Cortex XSOAR On-prem Documentation

Product
Cortex XSOAR
Version
8.13
Creation date
2026-02-12
Last date published
2026-05-27
Category
Administrator Guide
Solution
On-prem
Abstract

Example workflow for backup and restore in the Cortex XSOAR tenant.

The following is an example of a typical backup and restore workflow.

  1. In the Cortex XSOAR tenant, run an on-demand or scheduled backup to the external storage you previously set up.

  2. Confirm the data is backed up.

  3. From the textual UI, shut down the tenant.

  4. Re-install the deployment from scratch with the same admin password, hardware, FQDN, and same major version of Cortex XSOAR as the original deployment.

  5. Re-upload the license after the installation completes.

  6. Connect to external storage that stores the backup.

  7. Run an additional backup using the same relative path as the location of the backup you want to restore, to enable viewing the backups.

  8. In the Backup and RestoreRestore tab in the tenant, load the backup file, verifying the correct backup by its name.

  9. Click Restore and then wait.

    During the restore the Cortex XSOAR web page will hang or be unavailable for up to an hour or longer, depending on data usage. Try to refresh the page after some time. When the Cortex XSOAR web page comes up successfully again, the restore has completed successfully.