Restore data

Restore data in Cortex XSOAR 8.13 On-prem.

Restore backed up data on-demand in case of failure, corruption, or if you want to roll back.

Ensure the backup Cortex XSOAR version is the same major version as the currently installed version. For example, if the backup version is 8.8.0.x, you can restore to any version of 8.8.0 (but not 8.9.0).

For backup and restore between primary and secondary data centers:

• Ensure the new cluster has the following configurations and hardware specifications.

  • The FQDN for the new cluster must be the same as the previous cluster.

  • The new cluster must have the same amount of nodes as the previous cluster.

  • The new cluster must have the same scale size (CPU, memory, and disk space) as the previous cluster.

  • The tenant Account Admin user for the new cluster must have the same password as the tenant Account Admin user in the previous cluster.

  The node IP addresses in the new cluster can differ from the previous one.

• If using NFS for external storage, ensure the NFS server is accessible from both deployments. The subnet should be the same, or another entry should exist for the new cluster but with the same path on the NFS server.

• Verify the new cluster was installed successfully and the tenant is accessible.

How to restore data in Cortex XSOAR

External storage and backup configurations are not retained during backup. If you restore on a new cluster installation, you will need to reconfigure the external storage and backup scheduler. If you restore on the same cluster where the external storage was originally configured and the backup was created, reconfiguration is unnecessary.

1. Navigate to Settings & Info → Settings → System → Backup and Restore.

2. In the Restore tab, configure the following.

Field	Details
Choose External Storage	If it is not defined, click Create new and set the same external storage parameters where your backup is stored.
Relative Path	The relative path to the external storage where your backup is stored.

1. Click Load backup files.

   The table shows the following details:

Column	Description
Backup name	Indicates the Cortex XSOAR version, the backup type (one-time or scheduled), and the timestamp in the format of YYYYMMDDhhmmss.
XSOAR version	The backup version.
Backup status	The backup status. For example, Completed.
Expires	When the expiration date will occur in relation to now.
Info	In case of failure, includes information about the kind of failure.

1. Click Restore.

   During the restore the tenant will hang or be unavailable for up to an hour or longer, depending on the data usage. When the restore finishes and the tenant becomes available, refresh the page.

2. For restoring on a new (clean) installation: Reconfigure the external storage and the backup scheduler settings.