Abstract
Troubleshoot Docker networking issues in Cortex XSIAM.
In Cortex XSIAM, integrations and scripts run either on the tenant, or on an engine.
If you have Docker networking issues when using an engine, you need to modify the d1.conf
file.
On the machine where the Engine is installed, open the
d1.conf
file.Add to the
d1.conf
file the following:{ "LogLevel": "info", "LogFile": "/var/log/demisto/d1.log", "EngineURLs": [ "wss://1234.demisto.live/d1ws" ], "BindAddress": ":443", "EngineID": "XYZ", "ServerPublic": "ABC" "ArtifactsFolder": "", "TempFolder": "", "python.pass.extra.keys": "--network=host" }
Save the file.
Restart the engine using
systemctl restart d1
orservice d1 restart
.Note
If the Allow running multiple engines on the same machine option is selected, run the command:
sudo systemctl restart d1_<Engine _name>