Migrate Data to Another Server for Multi-Tenant - Administrator Guide - 6.10 - Cortex XSOAR - Cortex - Security Operations

Cortex XSOAR Administrator Guide
Product
Cortex XSOAR
Version
6.10
Creation date
2022-10-13
Last date published
2024-09-05
End_of_Life
EoL
Category
Administrator Guide
Abstract

Migrate Cortex XSOAR data to another server in a multi-tenant environment.

The main server has the host server information. The host server has the tenant information and the main server address.

  1. In the main server, update the server address to the new server address.

    1. Go to Settings → About → Troubleshooting.

    2. In the External Host Name field, enter the address of the new main server.

      This information will be sent to all the hosts.

  2. In the host servers, verify that the new External Host Name appears.

    1. Go to Settings → About → Troubleshooting.

    2. Verify that the address in the External Host Name field is the address of the new main server.

  3. Install Cortex XSOAR on the servers in the new environment.

    Do not start the Cortex XSOAR service when the installation finishes.

  4. Copy the following files and directories from the old server to the new server.

    • /var/lib/demisto

    • /usr/local/demisto/cert.key

    • /usr/local/demisto/cert.pem

    • /usr/local/demisto/demisto.lic

    For example, for the cert.key file, type scp cert.pem <username@NewServerIPAddress>:</remote/directory>.

    Where username is the user on the new server and NewServerIPAddress is the IP address of the new server. The /remote/directory is the path of the directory you want to copy the file to. If you do not specify a directory, the file will be copied to the user home directory.

    For /var/lib/demisto, type scp -r /var/lib/demisto <username@NewServerIPAddress>:</remote/directory>.

  5. Start the Cortex XSOAR service using the appropriate command for your OS and wait for the server to complete the indexing process.

    • systemctl start demisto

    • sudo service demisto start

  6. Shut down the machines in the old environment.

Troubleshooting

If a host has the wrong main server address after moving, you can resolve this by creating OTC with the following info:

Hosts: {main: address}

After restart, the host should be updated with the new address.