Sizing Requirements for High Availability Deployments

Information about the sizing requirements for Cortex XSOAR High Availability deployment. Application servers, fileshare server, Elasticsearch.
App Servers
Cortex XSOAR recommends you have at least 2 application servers meeting the requirements listed below, as well as a load balancer and shared file system.
Component
Dev Environment Minimum
Production Minimum
CPU
8 CPU cores
16 CPU cores
Memory
16 GB RAM
32 GB RAM
Storage
The storage requirement is irrespective of the file share.
100 GB SSD
250 GB SSD with minimum 1k dedicated IOPS
Depending on the size of your log files, consider increasing this to 500 GB.
File Share Server
Cortex XSOAR recommends your file sharing server meet the following minimum requirements.
  • If you are using Amazon EFS, GCP File Store, or Azure Files, verify that you are only using these systems for your file sharing and not as the database or application servers.
  • The file sharing server must be in the same virtual private cloud as the application servers.
Component
Dev Environment Minimum
Production Minimum
Storage
100 GB SSD
250 GB SSD with minimum 1k dedicated IOPS
Elasticsearch Database
Cortex XSOAR recommends you have the following machines configured for each environment:
Dev Environment
Production Environment
At least 1 node
At least 3 nodes in each Elasticsearch cluster
Component
Dev Node Minimum
Production Node Minimum
CPU
8 CPU cores
16 CPU cores
Memory
16 GB RAM
32 GB RAM
Storage
250 GB
500 GB SSD with minimum 3k dedicated IOPS

Recommended For You