XSOAR Multi-Engine Deployment on CentOS7

cancel
Showing results for 
Show  only  | Search instead for 
Did you mean: 
Announcements
Please sign in to see details of an important advisory in our Customer Advisories area.

XSOAR Multi-Engine Deployment on CentOS7

L1 Bithead

I just had our instance migrated to 8.5.  during testing we figure out that we could not update our engine using the shell program and need to do a zip deployment.  The basic instructions for ZIP does not support multple engines on the same host.  Here is our solution

 

If see problems please comment

 

xsoar create zip archive "d1_ENGINENAME".zip
Download "d1_ENGINENAME".zip
copy to server

cd /usr/local/demisto/ or mkdir /usr/local/demisto/

 

-- IF YOU DO NOT HAVE A RUNNING ENGINE --
mkdir /usr/local/demisto/
groupadd demisto
sudo useradd -g demisto -s /bin/false demisto
chown demisto:demisto /usr/local/demisto

 

 

-- ONCE /usr/local/demisto/ EXISTS --
cd /usr/local/demisto/
mkdir d1_ENGINENAME
chmod 755 d1_ENGINENAME
unzip PATH_TO_d1_ENGINENAME.zip -d /usr/local/demisto/d1_ENGINENAME
chown -R demisto:demisto d1_ENGINENAME
setcap CAP_NET_BIND_SERVICE=+eip /usr/local/demisto/d1_ENGINENAME/d1_linux_amd64


-- SETUP SYSCTL

cd /etc/systemd/system/
touch .d1_ENGINENAME.service
MODIFY the Services File
systemctl enable d1_ENGINENAME
systemctl start d1_ENGINENAME


--------- SYSCTL FILE   i.e.  .service. ----------------

[Unit]
Description=Demisto Engine Service
After=network.target

[Service]
WorkingDirectory=/usr/local/demisto/d1_ENGINENAME
Type=simple
User=demisto
Group=demisto
ExecStart=/usr/local/demisto/d1_ENGINENAME/d1_linux_amd64
EnvironmentFile=/etc/environment
Restart=always

[Install]
WantedBy=multi-user.target

-----------------------------------------

 

1 REPLY 1

L0 Member

Hey,

Indeed based on the documentation the only way to support multiple engines is to install the engine using Shell method.
Installing on engine method on Centos 7, is only Zip.
as a result of the above indeed mltuple engine installation on Centos 7 is not supported.

to add this functionality in an official way I suggest submitting a feature request to in https://xsoar.ideas.aha.io/

 

  • 256 Views
  • 1 replies
  • 0 Likes
Like what you see?

Show your appreciation!

Click Like if a post is helpful to you or if you just want to show your support.

Click Accept as Solution to acknowledge that the answer to your question has been provided.

The button appears next to the replies on topics you’ve started. The member who gave the solution and all future visitors to this topic will appreciate it!

These simple actions take just seconds of your time, but go a long way in showing appreciation for community members and the LIVEcommunity as a whole!

The LIVEcommunity thanks you for your participation!