To avoid a single point of failure, configure a secondary remote agent as a backup.
If the primary agent becomes unavailable, the secondary agent automatically takes over remote execution of actions, jobs, and connectors after a 30-second downtime.
If the primary agent fails while executing a task, that task fails and must be manually re-run.
All other pending tasks are routed to the secondary agent.
Once the primary agent is restored, all jobs, actions, and connectors seamlessly switch back to it.
To set up high availability for remote agents, do the following:
Go to SOAR settings > Advanced > Remote Agents.
Click View more on the agent you want to set as primary and assign a
secondary agent. The side drawer opens
with all the information on the agent.
Click Add secondary agent. You can create one secondary agent for
each primary agent. You cannot use the same secondary agent for two different
primary agents.
If your primary agent is not updated to the latest version, a message
prompts you to click Update.
If your connectors are on an older version, you're prompted to redeploy them to
support high availability.
For more information, see Redeploy connectors.
Follow the process to set up an agent. You can choose to set up the agent using
manual installation or a docker. Make sure the secondary agent has the same network or internet access
as the primary agent. The status of the secondary agent is shown as live in the High Availability
column in the Remote Agents page.
Notifications
You can register for agent notifications for your environments from the Notifications bell.
Notifications are triggered only after the remote agent has been down for 90 seconds.
[[["Easy to understand","easyToUnderstand","thumb-up"],["Solved my problem","solvedMyProblem","thumb-up"],["Other","otherUp","thumb-up"]],[["Hard to understand","hardToUnderstand","thumb-down"],["Incorrect information or sample code","incorrectInformationOrSampleCode","thumb-down"],["Missing the information/samples I need","missingTheInformationSamplesINeed","thumb-down"],["Other","otherDown","thumb-down"]],["Last updated 2025-03-06 UTC."],[[["High availability for remote agents in Google SecOps SOAR can be achieved by configuring a secondary agent as a backup to the primary agent."],["The secondary agent automatically takes over if the primary agent becomes unavailable, after a 30-second downtime, ensuring continuous remote execution of actions, jobs, and connectors."],["Only one secondary agent can be assigned to each primary agent, and a secondary agent cannot be shared between multiple primary agents."],["To enable this feature, you can navigate to the Remote Agents section in SOAR settings and add a secondary agent to a selected primary agent."],["Notifications are triggered after a remote agent has been down for 90 seconds, which is a longer time frame than when the secondary takes over."]]],[]]
