If I have a dev, stage and prod instance? Can I use git sync to synchronize components, pull updates, and push playbooks and cases from one instance to another? If not, how would I be able to set certain cases and playbooks to simulated mode or dev by default?
Solved
Git sync between secops soar instances
+2Best answer by TonyH
Hello,
I don't believe you can do this with Gitsync between different instances. As mentioned you can create a playbook (import/export) between instances. Within the playbooks run in simulator mode with test data.
+5- Bronze 1
Are your dev, stage and prod instances 3 separate SOAR instances or just environments in one SOAR instance?
if they are 3 separate SOAR instances:
I haven't tried this, but you could probably set your "source of truth" instance to sync to git (push) and the other instances can pull from that same repo in scheduled jobs. It would probably be better to run the job manually either in IDE or a disabled scheduled job.
if they're 3 environments in 1 SOAR instance:
You're probably better off creating new playbooks (or duplicate a production one) and set it to the dev environment only to perform testing.
+2Are your dev, stage and prod instances 3 separate SOAR instances or just environments in one SOAR instance?
if they are 3 separate SOAR instances:
I haven't tried this, but you could probably set your "source of truth" instance to sync to git (push) and the other instances can pull from that same repo in scheduled jobs. It would probably be better to run the job manually either in IDE or a disabled scheduled job.
if they're 3 environments in 1 SOAR instance:
You're probably better off creating new playbooks (or duplicate a production one) and set it to the dev environment only to perform testing.
Yes they are three separate instances. Trying to understand options with syncing and pushing cases to production so developers can have an environment to test and develop playbooks in simulated mode with test cases or cases not in production.
Hello,
I don't believe you can do this with Gitsync between different instances. As mentioned you can create a playbook (import/export) between instances. Within the playbooks run in simulator mode with test data.
Enter your E-mail address. We'll send you an e-mail with instructions to reset your password.