Install Cortex XSOAR for a Multi-Tenant Deployment with Elasticsearch
Install Cortex XSOAR for a multi-tenant deployment using
an Elasticsearch database. Installer flags for multi-tenant deployment
with Elasticsearch.
Multi-tenant deployments
are only intended for MSSPs and certain enterprise use cases. If
you are not an MSSP and want to deploy a multi-tenant environment,
you must first consult with the Cortex XSOAR product management
team. If you deploy a multi-tenant environment without approval
from the product management team, Cortex XSOAR will not support
the deployment.
Ensure you run all commands as root
user.
Files and folders
These are the files and
folders created during the multi-tenant installation.
File/Folder | Path |
|---|---|
Binaries | /usr/local/demisto |
Data | /var/lib/demisto |
Logs | /var/log/demisto |
Configuration | /etc/demisto.conf (this is not created if defaults are selected during installation). |
- Download the server package you received from Cortex XSOAR support.
- Run thechmod +x demistoserver-{version}.shto make the server package executable.
- To install the app server with Elasticsearch, run one of the following commands:
- If using username and password authentication:sudo ./demistoserver-X.sh -- -multi-tenant -elasticsearch-url=<elastic search url address> -elasticsearch-username=<the elasticsearch user name> -elasticsearch-password=<the elasticsearch password>
- If using API key authentication:sudo ./demistoserver-X.sh -- -multi-tenant -elasticsearch-url=<elastic search url address> -elasticsearch-api-key=<the elasticsearch API key>
FlagTypeDescription-multi-tenantStringIndicates that the installation is for a Multi-tenant deployment.-elasticsearch-urlStringElasticsearch URL addresses (comma-separated). For example,http://test1:9200,http://test2:9200-elasticsearch-api-keyStringThe Elasticsearch API key, which should be used in licensed versions.Note:If you use this flag, you do not need to use the-elasticsearch-usernameand-elasticsearch-passwordflags.-elasticsearch-usernameStringThe Elasticsearch username. This flag is used with the-elasticsearch-passwordflag.Note:If you use this flag, you do not need to use the-elasticsearch-urlflag.-elasticsearch-passwordStringThe Elasticsearch password. This flag is used with the-elasticsearch-usernameflag.Note:If you use this flag, you do not need to use the-elasticsearch-urlflag.-elasticsearch-proxyBooleanWhether to use a proxy when communicating with Elasticsearch. Can betrueorfalse. Default isfalse.-elasticsearch-insecureBooleanWhether to trust any certificate when communicating with Elasticsearch. Can betrueorfalse. Default istrue.-elasticsearch-timeoutIntegerThe amount of time (in seconds) before Elasticsearch times out. Default is 20 seconds.To continue with a high availability configuration, you must install an additional app server.
Recommended For You
Recommended Videos
Recommended videos not found.
