Deploy Engines in a High Availability Environment - Administrator Guide - 6.6 - Cortex XSOAR - Cortex - Security Operations

Cortex XSOAR Administrator Guide
Product
Cortex XSOAR
Version
6.6
Creation date
2022-09-29
Last date published
2024-07-30
End_of_Life
EoL
Category
Administrator Guide
Abstract

When adding application servers, update the engines to connect through the load balancer.

Engines deployed prior to the migration to Elasticsearch will remain connected to the newly migrated Cortex XSOAR application server.

When additional Cortex XSOAR application servers are deployed, and placed behind a load balancer, you need to update the engines to connect through the load balancer.

  1. Verify that the BaseURL and ExternalHostname server configurations have been updated on the servers to reference the load balancer url.

  2. Stop the engine service.

  3. Create a backup of the /usr/local/demisto/d1.conf file.

  4. Edit the /usr/local/demisto/d1.conf file on the engine.

    Set the first line in the EngineURLs section to point to the new load balancer URL.

    {
	"LogLevel": "info",
	"LogFile": "d1.log",
	"EngineURLs": [
		"wss://LOADBALANCERURL/d1ws"
	],
	…
}

  5. Start the engine service.

  6. Validate the engine is connected by going to Settings → Engines.