Scaled Installation (Multi-Node)
The following procedure describes how to install Chronicle SOAR in scale mode (multi-node deployment):
-
Decide on your preferred deployment type:
- 2 Node Deployment – All-in-one node (with database on it) + DPU node
- 3 Node Deployment – All-in-one node + DPU node + DB node (external database)
- Prepare the machines required for the deployment following this guide.
- Copy the installer file to all the machines you prepared
- Prepare a dedicated shared folder (address, username, password)
- Follow the provided deployment steps:
Node Deployment
-
Install the AIO node on the dedicated machine by executing the following
commands:
sudo chmod +x siemplify_installer.sh
sudo bash siemplify_installer.sh -m dpu -ii [app_ip] -di [db_ip] -su [username] -sp [password] -cid [customer_id]
- Wait for the installation to complete
- Copy your customer ID from: /opt/siemplify/siemplify_server/bin/Siemplify.customer
-
Now install the DPU node on the dedicated machine by executing the following
commands:
sudo chmod +x siemplify_installer.sh
sudo bash siemplify_installer.sh -m app -di [db_ip] -su [username] -sp [password]
- Wait for the installation to complete and access Chronicle SOAR to start working
Node Deployment
-
Install the DB node on the dedicated machine by executing the
following commands:
sudo chmod +x siemplify_installer.sh
sudo bash siemplify_installer.sh -m db
- Wait for the installation to complete
-
Install the APP node on the dedicated machine by executing the following
commands:
sudo chmod +x siemplify_installer.sh
sudo bash siemplify_installer.sh -m app -di [db_ip] -su [username] -sp [password]
- Wait for the installation to complete
- Copy your customer ID from: /opt/siemplify/siemplify_server/bin/Siemplify.customer
-
Now install the DPU node on the dedicated machine by executing the
following commands:
sudo chmod +x siemplify_installer.sh
sudo bash siemplify_installer.sh -m app -di [db_ip] -su [username] -sp [password]
- Wait for the installation to complete and access Chronicle SOAR to start working.