Fortinet black logo

Installing Alibaba Cloud Collector

Copy Link
Copy Doc ID 1af6cda9-d1f9-11ea-96b9-00505692583a:967133
Download PDF

Installing Alibaba Cloud Collector

This chapter describes how to install the FortiSIEM Alibaba Cloud Collector.

Step 1: Download the Alibaba Package

Download the Alibaba Cloud Collector package from the Fortinet Support website https://support.fortinet.com. See "Downloading FortiSIEM Products" for more information on downloading products from the support website. The name of the collector download is FSM_Full_Collector_AlibabaCloud_5.3.2_build<build_number>.zip.

Step 2: Upload to Alibaba Cloud

  1. Use the following command to upload the collector image you created in the previous step:

    $./ossutilmac64 cp file oss://<bucketName>/<FileName>

  2. Get the OSS link:

    Log in to the Alibaba Cloud Web UI (Web interface). From the UI, select the uploaded file: File> Preview, and copy the file's URL.

Step 3: Create the Image from the Uploaded File

  1. Log in to the Alibaba Cloud Web UI.

  2. Navigate to the ECS ( Elastic Computing Service).

  3. Click the Images tab.

  4. Select Custom Images under SnapShot and Images in the left-hand pane:

  5. Click Import Image on the top right of the Images screen.

  6. Enter the OSS object Address that you copied in Step 2: "Upload to Alibaba Cloud", Sub-step 2: "Get the OSS link".

  7. Click OK.

  8. Wait until the image is created.

Step 4: Create an Instance from the Created Image

  1. Select the image you created from the table on the Images tab in the Web UI.

  2. Click Create Instance in the lower-right side of the Images tab.

    Enter all of the required details, such as VPC, Security Groups, Elastic IP keypair, and so on, similar to Amazon AWS.

Step 5: Register Collectors to Supervisor Node

For Enterprise deployments, follow these steps:

  1. Login to Supervisor with 'Admin' privileges.

  2. Go to ADMIN > Setup > Collectors and add a Collector by entering:

    1. Name – Collector Name.

    2. Guaranteed EPS – this is the EPS that the Collector will always be able to send. It could send more if there is excess EPS available.

    3. Start Time and End Time – set to 'Unlimited'.

  3. SSH to the Collector and run following script to register Collectors:

    phProvisionCollector --add <user> <password> <Super IP or Host> <Organization> <CollectorName>

    1. Set User and Password use the admin User Name and password for the Supervisor

    2. Set IP Address as 'Supervisor IP'.

    3. Set Organization as 'Super'.

    4. Set CollectorName from Step 2a.

      The Collector will reboot during the Registration

  4. Go to ADMIN > Health > Collector Health and see the status.

For Service Provider deployments, follow these steps:

  1. Login to Supervisor with 'Admin' privileges.

  2. Go to ADMIN > Setup > Organizations and add an Organization.

  3. Enter the Organization Name, Admin User, Admin Password, and Admin Email.

  4. Under Collectors, click New.

  5. Enter the following details:

    1. Collector Name – Collector Name.

    2. Guaranteed EPS – this is the EPS that the Collector will always be able to send. It could send more if there is excess EPS available.

    3. Start Time, and End Time - could be set as 'Unlimited'.

  6. SSH to the Collector and run following script to register Collectors:

    phProvisionCollector --add <user> <password> <Super IP or Host> <Organization> <CollectorName>

    1. Set User and Password use the admin User Name and password for the Supervisor

    2. Set IP Address as 'Supervisor IP'.

    3. Set Organization as 'Super'.

    4. Set CollectorName.

      The Collector will reboot during the Registration

  7. Go to ADMIN > Health > Collector Health and check the status.

Installing Alibaba Cloud Collector

This chapter describes how to install the FortiSIEM Alibaba Cloud Collector.

Step 1: Download the Alibaba Package

Download the Alibaba Cloud Collector package from the Fortinet Support website https://support.fortinet.com. See "Downloading FortiSIEM Products" for more information on downloading products from the support website. The name of the collector download is FSM_Full_Collector_AlibabaCloud_5.3.2_build<build_number>.zip.

Step 2: Upload to Alibaba Cloud

  1. Use the following command to upload the collector image you created in the previous step:

    $./ossutilmac64 cp file oss://<bucketName>/<FileName>

  2. Get the OSS link:

    Log in to the Alibaba Cloud Web UI (Web interface). From the UI, select the uploaded file: File> Preview, and copy the file's URL.

Step 3: Create the Image from the Uploaded File

  1. Log in to the Alibaba Cloud Web UI.

  2. Navigate to the ECS ( Elastic Computing Service).

  3. Click the Images tab.

  4. Select Custom Images under SnapShot and Images in the left-hand pane:

  5. Click Import Image on the top right of the Images screen.

  6. Enter the OSS object Address that you copied in Step 2: "Upload to Alibaba Cloud", Sub-step 2: "Get the OSS link".

  7. Click OK.

  8. Wait until the image is created.

Step 4: Create an Instance from the Created Image

  1. Select the image you created from the table on the Images tab in the Web UI.

  2. Click Create Instance in the lower-right side of the Images tab.

    Enter all of the required details, such as VPC, Security Groups, Elastic IP keypair, and so on, similar to Amazon AWS.

Step 5: Register Collectors to Supervisor Node

For Enterprise deployments, follow these steps:

  1. Login to Supervisor with 'Admin' privileges.

  2. Go to ADMIN > Setup > Collectors and add a Collector by entering:

    1. Name – Collector Name.

    2. Guaranteed EPS – this is the EPS that the Collector will always be able to send. It could send more if there is excess EPS available.

    3. Start Time and End Time – set to 'Unlimited'.

  3. SSH to the Collector and run following script to register Collectors:

    phProvisionCollector --add <user> <password> <Super IP or Host> <Organization> <CollectorName>

    1. Set User and Password use the admin User Name and password for the Supervisor

    2. Set IP Address as 'Supervisor IP'.

    3. Set Organization as 'Super'.

    4. Set CollectorName from Step 2a.

      The Collector will reboot during the Registration

  4. Go to ADMIN > Health > Collector Health and see the status.

For Service Provider deployments, follow these steps:

  1. Login to Supervisor with 'Admin' privileges.

  2. Go to ADMIN > Setup > Organizations and add an Organization.

  3. Enter the Organization Name, Admin User, Admin Password, and Admin Email.

  4. Under Collectors, click New.

  5. Enter the following details:

    1. Collector Name – Collector Name.

    2. Guaranteed EPS – this is the EPS that the Collector will always be able to send. It could send more if there is excess EPS available.

    3. Start Time, and End Time - could be set as 'Unlimited'.

  6. SSH to the Collector and run following script to register Collectors:

    phProvisionCollector --add <user> <password> <Super IP or Host> <Organization> <CollectorName>

    1. Set User and Password use the admin User Name and password for the Supervisor

    2. Set IP Address as 'Supervisor IP'.

    3. Set Organization as 'Super'.

    4. Set CollectorName.

      The Collector will reboot during the Registration

  7. Go to ADMIN > Health > Collector Health and check the status.