Configure the Live Backup Environment for a Distributed Database
- Navigate to.SettingsAdvancedRemote Databases
- Select the database node for which you want to configure Live Backup and clickEdit Live Backup Configuration.
- Toggle the Live Backup field toOn.
- Configure the backup server properties.
- PropertyValueHostnameBackup server IP address or hostname (without the https:// prefix).Port443 (by default).Trust server certificateOn: certificates are not checked. Off: certificates are checked.Use proxySelect whether to use a proxy.
- ClickSave Live Backup Configuration.
- Copy the installation package to the machines on which you want to install the live backup servers. Ensure that the backup server has a different IP address from the active server.
- Install Cortex XSOAR using the following command:./demistoserver-xxxx.sh -- -dr -do-not-start-server -db-only -external-address=<IP or hostname> -db-secret=<your_db_secret> -y
- ParameterDescriptiondemistoserver-XThe name of the Cortex XSOAR installer, where X is the version and build number.drThe flag indicating that the installation is for disaster recovery.do not start serverThe flag indicating that the server should not be started.db-onlyThe flag indicating that only the database server is installed.db-secretThe 10-character string that you defined when you installed the database server.external-addressThe app server's public IP address or hostname.Do not include the http or https prefix.yAnswers all remaining installation questions with a yes (using default settings) and enables you to continue the installation silently.For example:sudo ./cortexxsoarserver--5.5-70066.sh -- -dr -do-not-start-server -db-only -db-secret=9876543210 -external-address=220.127.116.11 -y
- Verify that the passive server is accessible from the active server through port 443 (or any other port configured as a listening port). Make sure that there are no firewalls that might drop communication.
- Stop the Cortex XSOAR server.
- Create a tarball file of the following necessary files and folders on the active server to be copied to the passive server.
To create the file, use the following command, which preserves demisto:demisto ownership and file permissions.tar --ignore-failed-read -pczf demistoBackup.tgz /var/lib/demisto/data /var/lib/demisto/artifacts /var/lib/demisto/attachments /var/lib/demisto/systemTools /var/lib/demisto/d2_server.key /usr/local/demisto/cert* /usr/local/demisto/demisto.lic
- Copy the created tarball file (demistoBackup.tgz) to the passive server using eitherscpor a tool that you prefer. For example,scp demistoBackup.tgz root@<yourBackupServerIPorHostname>:/root
- On the passive server, extract the backup tarball file with the following command (original file permissions and ownership will be preserved):tar -C / -xzpvf demistoBackup.tgz
- Start the passive server.
- Start the active server.
If the procedure was successful, you will see the following information populated in the table in
The hostname or IP address of the backup server.
The connection status to the backup server. Possible values are:
Recommended For You
Recommended videos not found.