ITRS-Log-Analytics-6.x User Guide¶
- Data source and application management
- Intelligence Module
- The fixed part of the screen
- Screen content for regressive algorithms
- Screen content for the Trend algorithm
- Screen content for the neural network (MLP) algorithm
- AI Rules List
- AI Learn
- AI Learn Tasks
- Scenarios of using algorithms implemented in the Intelligence module
- Scheduler Module
- Permission
- Register new algorithm
- Configuring Single Sign On (SSO)
- Configuration steps
- Create an User Account for Elasticsearch auth plugin
- Define Service Principal Name (SPN) and Create a Keytab file for it
- Create a file named krb5Login.conf:
- Append the following JVM arguments (on Elasticsearch node in /etc/sysconfig/elasticsearch):
- Add the following additional (sso.domain, service_principal_name, service_principal_name_password) settings for ldap in elasticsearch.yml or properties.yml file wherever the ldap settings are configured:
- To apply the changes restart Elasticsearch service
- Enable SSO feature in
kibana.ymlfile:
- Client (Browser) Configuration##
- Configuration steps
- Logstash
- Logstash - Input “beats”
- Logstash - Input “network”
- Logstash - Input SNMP
- Logstash - Input HTTP / HTTPS
- Logstash - Input File
- Logstash - Input database
- Logstash - Filter “beats syslog”
- Logstash Filter “network”
- Logstash - Filter “geoip”
- Logstash - Output to Elasticsearch
- Logstash plugin for “naemon beat”
- Logstash plugin for “perflog”
- Single password in all Logstash outputs
- Secrets keystore for secure settings
- Enabling encryption for Apache Kafka clients##