This is the part two of our Coxtex XSOAR series where we upgrade the XSOAR to the latest version. I thought of writing the guide after my disastrous attempt of upgrading by following the official Palo Alto guide. Two support calls and 12 hours later we were able to get it up and running, so here is the corrected version of Cortex XSOAR Multi-Tenant upgrade guide ;)
If you are new to XSOAR and want it set up in your home lab click here.
Requirements:
Space in the target location should have more than 10 GB.
Need ROOT access to the server.
Step 1
Get the latest version of the XSOAR installer from here and the license if you are working with community edition. If you are doing this with a licensed copy with PA support, open a support case with Palo-Alto for the download link.
Step 2
Get the installer file in host machines and Main Server, and execute the below command in the same directory as the file (Replace demistoserver-XXX.sh with the actual file name).
sudo chmod +x demistoserver-XXXX.sh
Step 3
Stop the Demisto service from Main server and all the hosts using the below command, yes there will be downtime.
sudo service demisto stop
Step 4
Start the installation in the host server using below commands. Default location that XSOAR stores temporary installation files is /tmp,
- If you have more than 10GB in /tmp
sudo ./demistoserver-XXX.sh -- -multi-tenant
2. If you do not have the enough space use the below command to specify a target folder
sudo ./demistoserver-XXX.sh --target /Target -- -multi-tenant
Step 5
Follow Step 4 in Main Server as well to upgrade.
Step 6
Start the demisto service in main server and host servers using below command
sudo service demisto start
Now you have the XSOAR latest version installed, enjoy!!! :)
If you prefer visual demonstration you can find it below.
https://www.youtube.com/embed/RjfWdu_vhcI