Deploy Engines in a High Availability Environment - Administrator Guide - EoL - 6.6 - Cortex XSOAR - Cortex - Security Operations

Cortex XSOAR Administrator Guide

Cortex XSOAR
Creation date
Last date published
Administrator Guide
End of Life > EoL

When adding application servers, update the engines to connect through the load balancer.

Engines deployed prior to the migration to Elasticsearch will remain connected to the newly migrated Cortex XSOAR application server.

When additional Cortex XSOAR application servers are deployed, and placed behind a load balancer, you need to update the engines to connect through the load balancer.

  1. Verify that the BaseURL and ExternalHostname server configurations have been updated on the servers to reference the load balancer url.

  2. Stop the engine service.

  3. Create a backup of the /usr/local/demisto/d1.conf file.

  4. Edit the /usr/local/demisto/d1.conf file on the engine.

    Set the first line in the EngineURLs section to point to the new load balancer URL.

    	"LogLevel": "info",
    	"LogFile": "d1.log",
    	"EngineURLs": [
  5. Start the engine service.

  6. Validate the engine is connected by going to SettingsEngines.