Set up an engine

Set up a Cortex AgentiX engine on a remote machine.

Engines are installed on a remote machine and used mainly for the following:

• Integration instances for on-prem applications. For example, the GitLab v2 integration enables you to run commands on GitLab instances.
• Execute scripts and commands that require access to on-prem resources. For example, the Active Directory v2 integration enables you to run commands in Active Directory.
• Generic Indicator export service. In Cortex AgentiX, you can configure an EDL to share a list of Cortex AgentiX indicators with other products on your network, such as a firewall or SIEM. For example, your Palo Alto Networks firewall can add IP addresses and domain data from the EDL to block or allow lists.
• Load balancing enables the distribution of the command execution load.

Before installation, we recommend you review the engine requirements for hardware and operating systems. Engines can be installed on Linux machines running a variety of operating systems, including Ubuntu, RHEL, Oracle Linux, and Amazon Linux.

1

Select Settings → Configurations → Data Broker → Engines → Create New Engine.

2

In the Engine Name field, add a meaningful name for the engine.

3

Select one of the installer types from the list.

4

(Optional) (Shell only) Select the checkbox to enable multiple engines to run on the same machine.

If you have an existing engine and you did not select the checkbox, and now you want to install another engine on the same machine, you need to delete the existing engine.

5

(Optional) Add any required configuration in JSON format.

6

Click OK to create the engine.

To learn more about engines, requirements, and installation, see Install an engine.