Elasticsearch Migration Use Cases
To migrate the Cortex XSOAR objects to
Elasticsearch, you must have Elasticsearch and Cortex SOAR 6.0 installed.
If you do not have Cortex XSOAR 6.0 installed, see Upgrade the Cortex XSOAR Server. First upgrade your
Cortex XSOAR environment and then run the migration tool. When you
run the migration tool, objects that are not stored in Elasticseach
are migrated to Elasticsearch. The supported objects in this release
are:
- indicators
- audits
The following are examples of Elasticsearch migration use cases.
Note that if an object is already in Elasticsearch in version 5.5,
it remains in Elasticsearch when you upgrade.
