Skip to main content

Hello Team,

We are planning to install a remote SOAR agent on a RHEL 9.5 server using a Docker-based setup. The machine has been procured following Google's recommended specifications, with the following hardware details:

  • CPU: 8 cores
  • RAM: 16GB
  • Storage: 100GB
  • OS: Red Hat Enterprise Linux 9.5 (Plow)

Partitioning details:

  • / and /apps – 100GB
  • /usr – 8.8GB
  • /var – 9.8GB
  • /tmp – 3.9GB
  • /var/log – 9.8GB
  • /opt – 5.9GB
  • /home – 4.9GB

Could you please clarify the following:

  1. What is the default installation directory for the remote SOAR agent?
  2. Do these partitioning values meet the installation requirements?
  3. Can the agent be installed in the /apps directory?

The remote SOAR agent install directory is /opt/SiemplifyAgent/ for manual installations and /var/log/SiemplifyAgent/ for docker installations, no sourcesAdditionally, the integrations and logs are located in the following directories: /opt/SiemplifyAgent/Integrations/ and /opt/SiemplifyAgent/Logs/


The installation path is only relevant for manual installation and does not apply when using Docker.


In Docker, there are two parts of the command responsible for mounting directories:


The first, -v ${PWD}/AgentShare_Name:/opt/AgentShare, maps /opt/AgentShare inside the container to {current_directory}/AgentShare_Name on the host file system. This means any changes made inside the container will be reflected on the host and vice versa. The path is explicitly defined by the user.


The second, -v agent_Name:/opt/SiemplifyAgent, maps /opt/SiemplifyAgent inside the container to a Docker-managed persistent volume. Unlike the first case, this volume is not directly tied to the current directory. Instead, Docker handles its location and storage automatically, ensuring that data persists even if the container is removed.

Reply


Terms & ConditionsCookie settings
Privacy Policy Terms of Service Gen AI Policy Community Guidelines Cookie Settings

© 2025 Google. All rights reserved.