Fortinet Document Library

Version:


Table of Contents

User Guide

21.4.0
Copy Link

AMI Onsight vCollector rotation procedure

This page outlines the steps required to replace an Onsight vCollector from an AMI while preserving all existing checks and historical data associated with the original Onsight vCollector. This document assumes the user has a basic knowledge of Amazon Machine Images and/or other disk images as well as basic knowledge of virtual machines provisioning.

Installation Procedure

  • The standard AMI is available within the AWS Marketplace by searching for “Panopta”.

  • Keep a text editor open as some of the following steps require some temporary notation.

  • There will be a short window of downtime while completing these steps, typically 1-2 minutes.

The instructions below outline the procedure for replacing an existing Onsight.

  1. Provision a new VM using the Onsight vCollector machine image.

  2. Perform appropriate network configuration.

  3. Obtain the customer key for your tenant - this may be found via the web UI at my.panopta.com by navigating to the portrait icon in the upper right corner of the navigation bar and looking under “My Account”. Note this for a later step.

  4. Obtain the appliance key for the current Onsight vCollector that will be replaced. This may be found by navigating to the details page for the Onsight vCollector in the Panopta web UI. Note this for a later step.

  5. Shutdown the existing Onsight vCollector that is being replaced. The container or VM should be disabled to prevent any future registration issues with this appliance.

  6. On the newly created Onsight vCollector, run the following commands from Root-level access (items in CAPS should be replaced with the respective key values saved in steps 3 and 4):

    1. onsight configure-collector --customer-key CUSTOMER-KEY-FROM-STEP-3

    2. onsight configure-collector --appliance-key APPLIANCE-KEY-FROM-STEP-4

    3. onsight start-vcollector

  7. Return to my.panopta.com, navigate to the details page of the Onsight vCollector, and verify data flow has been restored.

AMI Onsight vCollector rotation procedure

This page outlines the steps required to replace an Onsight vCollector from an AMI while preserving all existing checks and historical data associated with the original Onsight vCollector. This document assumes the user has a basic knowledge of Amazon Machine Images and/or other disk images as well as basic knowledge of virtual machines provisioning.

Installation Procedure

  • The standard AMI is available within the AWS Marketplace by searching for “Panopta”.

  • Keep a text editor open as some of the following steps require some temporary notation.

  • There will be a short window of downtime while completing these steps, typically 1-2 minutes.

The instructions below outline the procedure for replacing an existing Onsight.

  1. Provision a new VM using the Onsight vCollector machine image.

  2. Perform appropriate network configuration.

  3. Obtain the customer key for your tenant - this may be found via the web UI at my.panopta.com by navigating to the portrait icon in the upper right corner of the navigation bar and looking under “My Account”. Note this for a later step.

  4. Obtain the appliance key for the current Onsight vCollector that will be replaced. This may be found by navigating to the details page for the Onsight vCollector in the Panopta web UI. Note this for a later step.

  5. Shutdown the existing Onsight vCollector that is being replaced. The container or VM should be disabled to prevent any future registration issues with this appliance.

  6. On the newly created Onsight vCollector, run the following commands from Root-level access (items in CAPS should be replaced with the respective key values saved in steps 3 and 4):

    1. onsight configure-collector --customer-key CUSTOMER-KEY-FROM-STEP-3

    2. onsight configure-collector --appliance-key APPLIANCE-KEY-FROM-STEP-4

    3. onsight start-vcollector

  7. Return to my.panopta.com, navigate to the details page of the Onsight vCollector, and verify data flow has been restored.