Create Agent with Docker
Before beginning this procedure, make sure your machine is Docker-ready, and can be logged in to Chronicle SOAR.
To deploy the Docker container:
- Log into the machine using putty.
- Enter your username and password.
- Log into the Docker hub with the following command. Note that you have to create a user in the Docker hub first and use this name and password to log in here. There is no need for special permissions.
docker login -u <username> -p <password>
- In the platform. navigate to Settings > Advanced > Remote Agents.
- Click the plus icon on the top right of the screen to open the Installation process.
- Select the option to deploy the Agent on a Docker.
- In the first step, add the name of the Agent and choose the environment it will be installed on. Note that if you have configured more than one Publisher, you will be given the option to select the Publisher.
- In the second step, double click to copy the Docker command and paste as is into the machine.
- When the deployment has finished, click Next in the platform to perform a connectivity check with your new agent. A success screen will display. If something has gone wrong, a failure screen will display instead which provides helpful links for troubleshooting.
- Click Done. The Agent is added. (Note that the Send Now column is not relevant for your needs at this time.)