Single node SOAR

[fpieressa]

Hi team! Is there any step by step procedure to install a SOAR in a single node architecture?

For an instance, wIth Recon 1.0 there were a recon-installer-1.0.0.7.tar.gz package with a "install-single-node.sh" script that did everything automatically, but we are not seeing nothing similar with the new version... As I'm seeing Recon 1.1 does not included it, and neither SOAR.

The procedure to install CDF and their dependecies is so complex, it will be great if Microfocus builds an Ansible or a Shell script to do everything automatically... or at least, an easy step by step procedure.

Thanks!

[fpieressa]

Hi team! Is there any step by step procedure to install a SOAR in a single node architecture?

For an instance, wIth Recon 1.0 there were a recon-installer-1.0.0.7.tar.gz package with a "install-single-node.sh" script that did everything automatically, but we are not seeing nothing similar with the new version... As I'm seeing Recon 1.1 does not included it, and neither SOAR.

The procedure to install CDF and their dependecies is so complex, it will be great if Microfocus builds an Ansible or a Shell script to do everything automatically... or at least, an easy step by step procedure.

Thanks!

[Ionut Daniel Mosoiu]

Hello, 

indeed the procedure it is complex because it is not longer one product anymore.

The based infrastructure is CDF which can be single or multi node.

And then the rest of the products Fusion, Recon, SOAR and new ESM Web .

First will require an understating of CDF and then to deploy the products on top of it.

Best Regards, 

Daniel

[fpieressa]

Hi! Thanks for your answer, I know CDF is required to deploy any application, but for an instance with Recon 1.0 there were a script "install-single-node.sh" that did everything automatically... including installing and configure CDF.  It will be great if Microfocus provides a script to any product with their requirements in a single Node...

[Ionut Daniel Mosoiu]

Hello, 

actually exist have a look on this "https://www.microfocus.com/documentation/arcsight/arcsight-platform-20.11/as_platform_admin_guide/#deployment_on-premises/platform_about.htm" 

Each label only needs to be entered once even though it might display multiple times in your /opt/my-install-config.yaml file.

Best Regards, 

Daniel

[mxn]

Hi folks!
Single node platform installation is not so complicated now.
1) You simply needs to download required packages (cdf itself , meta and other required images)
2) Unzip cdf package
3) Copy all downloaded images to .../cdf-2020.08.00153-20.11.0.5/arcsight/images
4) Copy meta to .../cdf-2020.08.00153-20.11.0.5/arcsight/metadata
5) In cdf-2020.08.00153-20.11.0.5/arcsight/config choose on of yaml-example files.
example-install-config-esm_cmd_center-single-node.yaml - best for single node soar
You should change it according your infrastructure (hostname, node size) and save as install-config.yaml in same folder.
6) cd to cdf-folder root and execute
./arcsight-install --cmd preinstall
./arcsight-install --cmd install
./arcsight-install --cmd postinstall
Enjoy!