Can we migration xsoar from standalone to multi tenant

Siwawut — Wed, 09 Oct 2024 10:11:09 GMT

Is it possible to migration xsoar from standalone to multi tenant ?

I have try to migration from xsoar standalone to multi tenant used method "Migrate Data to Another Server for Multi-Tenant" ref.

https://docs-cortex.paloaltonetworks.com/r/Cortex-XSOAR/6.8/Cortex-XSOAR-Administrator-Guide/Migrate-Data-to-Another-Server-for-Multi-Tenant
But found issue when try to transfer demisto folder from standalone to new multi tenant server.
When scp, it's show permission deny. So, I have "sudo su" to get the root permission and zip the demisto folder then scp to new server on /tmp/ then extract zip to /var/lib/demisto. Then I have scp the cert and demisto.lic to /usr/local/demiso also.
After transfer all data already, I have start service used "sudo systemctl start demisto" and found the service could not be start.
So, is all my procedure is correct or the standalone can not migration to multi tenant ?

Re: Can we migration xsoar from standalone to multi tenant

Siwawut — Thu, 17 Oct 2024 06:29:30 GMT

There is no official way to migration from stand alone to multi-tenant. TAC has confirmed as below.

Officially we don't support migration from standalone to multi -tenant, only content can be migrated and not incidents.

The reason behind this is that the DB structure for Standalone and MT is different, so we don't have a way to migrate this.

The best to achieve what you want is to migrate content and level incidents and Integration configurations behind ,worst case scenario, incident data can be migrated using mirroring, but when you do mirroring it causes issues with indexes ...especially the amount of incidents is large.

topic Can we migration xsoar from standalone to multi tenant in Cortex XSOAR Discussions

Can we migration xsoar from standalone to multi tenant

Re: Can we migration xsoar from standalone to multi tenant