End-of-Life (EoL)

Restore Cortex XSOAR Objects Stored in Elasticsearch

Follow these instructions to restore Cortex XSOAR objects stored in Elasticsearch.
Follow these steps to restore an Elasticsearch object snapshot.
  1. Stop the Cortex XSOAR service with the
    sudo service demisto stop
    command.
  2. Close the relevant Elasticsearch indexes with the
    curl -XPOST :“http://
    <serveradress:port>
    /*-dmst-*/_close”
    command.
  3. Restore the snapshot with the
    "http://
    <serveradress:port>
    /_snapshot/DemistoBackupRepository/snapshot_name_to_restore/_restore"
    command.
  4. Start the Cortex XSOAR service with the
    sudo service demisto start
    command.

Recommended For You