Restore data - From the Cortex XSOAR tenant, perform on-demand restore of Cortex XSOAR data. - Administrator Guide - 8.13 - Cortex XSOAR - Cortex - Security Operations

Cortex XSOAR On-prem Documentation

Product
Cortex XSOAR
Version
8.13
Creation date
2026-02-12
Last date published
2026-05-27
Category
Administrator Guide
Solution
On-prem
Abstract

From the Cortex XSOAR tenant, perform on-demand restore of Cortex XSOAR data.

Restore backed up data on-demand in case of failure, corruption, or if you want to roll back.

Danger

Ensure the backup Cortex XSOAR version is the same major version as the currently installed version. For example, if the backup version is 8.8.0.x, you can restore to any version of 8.8.0 (but not 8.9.0).

For backup and restore between primary and secondary data centers:

  • Ensure the new cluster has the following configurations and hardware specifications.

    • The FQDN for the new cluster must be the same as the previous cluster.

    • The new cluster must have the same amount of nodes as the previous cluster.

    • The new cluster must have the same scale size (CPU, memory, and disk space) as the previous cluster.

    • The tenant Account Admin user for the new cluster must have the same password as the tenant Account Admin user in the previous cluster.

    Note

    The node IP addresses in the new cluster can differ from the previous one.

  • If using NFS for external storage, ensure the NFS server is accessible from both deployments. The subnet should be the same, or another entry should exist for the new cluster but with the same path on the NFS server.

  • Verify the new cluster was installed successfully and the tenant is accessible.

How to restore data in Cortex XSOAR

Important

External storage and backup configurations are not retained during backup. If you restore on a new cluster installation, you will need to reconfigure the external storage and backup scheduler. If you restore on the same cluster where the external storage was originally configured and the backup was created, reconfiguration is unnecessary.

  1. Navigate to Settings & InfoSettingsSystemBackup and Restore.

  2. In the Restore tab, configure the following.

    Field

    Details

    Choose External Storage

    If it is not defined, click Create new and set the same external storage parameters where your backup is stored.

    Relative Path

    The relative path to the external storage where your backup is stored.

  3. Click Load backup files.

    The table shows the following details:

    Column

    Description

    Backup name

    Indicates the Cortex XSOAR version, the backup type (one-time or scheduled), and the timestamp in the format of YYYYMMDDhhmmss.

    XSOAR version

    The backup version.

    Backup status

    The backup status. For example, Completed.

    Expires

    When the expiration date will occur in relation to now.

    Info

    In case of failure, includes information about the kind of failure.

  4. Click Restore.

    During the restore the tenant will hang or be unavailable for up to an hour or longer, depending on the data usage. When the restore finishes and the tenant becomes available, refresh the page.

  5. For restoring on a new (clean) installation: Reconfigure the external storage and the backup scheduler settings.