Reindex the Entire Database

Reindex the database in Cortex XSOAR. Reindexing data managing
Follow these steps to reindex the entire database. Depending on the volume of the data in the system, it may take some time for the indexing to complete.
By default, audits are not reindexed. See Reindex the Audit Log for instructions.
  1. Stop the Cortex XSOAR service.
    sudo service demisto stop
  2. Backup the index directory (
    The backup of the index directory should not be stored under
  3. Delete the index folder using the following command.
    sudo rm -rf /var/lib/demisto/data/demistoidx
  4. Start the Cortex XSOAR service.
    sudo service demisto start
  5. Log in to your Cortex XSOAR instance and verify that the reindex process was successful.
    All of your data should appear, for example, incidents, playbooks, automations, and so on. If there is a problem, contact the Cortex XSOAR support team.

Recommended For You