Restore a partition for a specific tenant in a multi
tenant environment
Cortex XSOAR automatically backs up the database.
In some cases, you might need to restore one or more partitions,
without needing to restore the entire database.
As of
Cortex XSOAR version 6.1, any XSOAR service that uses the Elasticsearch
database no longer runs automatic backups. To back up or restore the
contents of your Elasticsearch database, follow the instructions
in the Elasticsearch documentation.
Log out all users from Cortex XSOAR.
Stop the tenant process.
Go to
Settings
Account
Management
Accounts
,
select the tenant account, and click
Stop
.
Backup the index directory. The default directory is
/var/lib/demisto/tenants/acc_
{TENANT_NAME}
/data/demistoidx
.
tar -czvf filename.tar.gz /var/lib/demisto/tenants/acc_
