Manage Engines - User Guide - 2 - Cortex XPANSE - Cortex - Security Operations

Cortex Xpanse Expander User Guide

Product
Cortex XPANSE
Version
2
Creation date
2024-03-28
Last date published
2024-05-24
Category
User Guide
Solution
Cloud
Abstract

Manage engines and load balancing groups.

You can manage engines and load-balancing groups by going to SettingsConfigurationsEngines.

You can view engine names, hosts, status, connection, etc.

You can do the following:

  • Add/remove engines to the Load-Balancing Group.Engines Overview

    You can only add the engine to the Load-Balancing group after you have connected the engine.

  • Create Load-Balancing Groups

    When selecting Load-Balancing GroupAdd to new group, you can create multiple Load-Balancing groups and decide which engines are part of each group. It is useful to create separate Load-Balancing groups. For example,

    • Use separate Load-Balancing groups for different integrations and instances. Create Load-Balancing groups for certain tasks, which can help segregate the infrastructure of critical integrations.

    • Managed Security Service Providers may want to split internal engines and SaaS product engines.

    • If you have multiple AWS accounts that are not connected and do not want a single point of failure for AWS integrations that use STS.

    Users can move an engine from one group to another. A group will be deleted when the last engine is removed from it.

    Each engine can only be part of a separate group.

  • Get engine logs

    Logs are located in /var/log/demisto. For multiple engines, logs are located in /var/log/demisto/<name of the engine>. For example, var/log/demisto.d1_e1.

  • Upgrade an engine

    If an engine requires an upgrade, the Status column shows those engines that require upgrades. Select the checkbox for the engine that requires an upgrade and click Upgrade Engine. When the upgrade finishes, the version appears in the Cortex XSIAM Version. The upgrade procedure can take several minutes.

    You can only upgrade the engine if you installed the engine with the shell installer. To upgrade engines that were not installed with the shell installer, you need to remove the engine and do a fresh install. For more information, see Install an Engine. For troubleshooting, see Troubleshoot Engine Upgrades.Install an EngineTroubleshoot Engine Upgrades

  • Delete an engine