- What's New
- Function Overview
- Service Overview
- Billing
- Getting Started
-
User Guide
- Buying SecMaster
- Authorizing SecMaster
- Viewing Security Overview
- Workspaces
- Viewing Purchased Resources
- Security Situation
- Resource Manager
- Risk Prevention
- Threat Operations
- Security Orchestration
-
Playbook Overview
- Ransomware Incident Response Solution
- Attack Link Analysis Alert Notification
- HSS Isolation and Killing of Malware
- Automatic Renaming of Alert Names
- Auto High-Risk Vulnerability Notification
- Automatic Notification of High-Risk Alerts
- Auto Blocking for High-risk Alerts
- Real-time Notification of Critical Organization and Management Operations
-
Settings
- Data Integration
-
Log Data Collection
- Data Collection Overview
- Adding a Node
- Configuring a Component
- Adding a Connection
- Creating and Editing a Parser
- Adding and Editing a Collection Channel
- Managing Connections
- Managing Parsers
- Managing Collection Channels
- Viewing Collection Nodes
- Managing Nodes and Components
- Partitioning a Disk
- Logstash Configuration Description
- Connector Rules
- Parser Rules
- Upgrading the Component Controller
- Customizing Directories
- Permissions Management
- Key Operations Recorded by CTS
-
Best Practices
-
Log Access and Transfer Operation Guide
- Solution Overview
- Resource Planning
- Process Flow
-
Procedure
- (Optional) Step 1: Buy an ECS
- (Optional) Step 2: Buy a Data Disk
- (Optional) Step 3: Attach a Data Disk
- Step 4: Create a Non-administrator IAM User
- Step 5: Configure Network Connection
- Step 6: Install the Component Controller (isap-agent)
- Step 7: Install the Log Collection Component (Logstash)
- (Optional) Step 8: Creating a Log Storage Pipeline
- Step 9: Configure a Connector
- (Optional) Step 10: Configure a Log Parser
- Step 11: Configure a Log Collection Channel
- Step 12: Verify Log Access and Transfer
- Credential Leakage Response Solution
-
Log Access and Transfer Operation Guide
-
API Reference
- Before You Start
- API Overview
- Calling APIs
-
API
- Alert Management
- Incident Management
- Indicator Management
- Playbook Management
- Alert Rule Management
- Playbook Version Management
- Playbook Rule Management
- Playbook Instance Management
- Playbook Approval Management
- Playbook Action Management
- Incident Relationship Management
- Data Class Management
- Workflow Management
- Data Space Management
- Pipelines
- Workspace Management
- Metering and Billing
- Metric Query
- Baseline Inspection
- Appendix
- FAQs
Show all
(Optional) Step 1: Buy an ECS
This topic walks you through how to buy an ECS for installing the log collector.
To collect data, you need to prepare an ECS and install the log collector on the ECS. Make sure the ECS has at least 50 GB of memory. If you already have an ECS that meets the requirements, skip this step.
Prerequisites
You have obtained the IAM administrator account information.
Buying an ECS
- View the ECS information.
- Log in to the console as the IAM administrator.
- Click
in the upper left corner of the management console, select a region or project, click
in the upper left corner of the page, and choose Compute > Elastic Cloud Server.
- On the ECS list page, click the name of the target ECS to go to its details page.
- View ECS details about AZ, Specifications, Image, System Disk, and Data Disk.
Figure 1 Viewing ECS Information
- Check whether the ECS system disk size is 50 GB or above.
- If yes, skip (Optional) Step 1: Buy an ECS and go to (Optional) Step 2: Buy a Data Disk.
- If no, go to 2 and buy an ECS.
- Go back to the Elastic Cloud Server page and click Buy ECS in the upper right corner of the page.
- On the ECS purchase page, configure parameters.
Table 1 Parameters for purchasing an ECS Parameter
Description
Basic Configuration
Configure Billing Mode and Region based on your service requirements.
If there are no special requirements for AZ, just select Random.
Instance
CPU Architecture
Select x86.
Currently, the log collector component controller (isap-agent) can only run on Linux ECSs running the x86 architecture.
Search Filters
Select an instance that meets the requirements as required. Minimum requirements: 2vCPUs and 4 GiB Memory.
OS
Image
You are advised to select Public image > Huawei Cloud EulerOS and then select the specific image as required.
Do not select images whose names contain "dedicated for making resources and not support password injection" because such images cannot be logged in to using passwords.
After selecting an image, set Host protection (HSS) if needed.
Storage & Backup
System Disk
Minimum requirements for System Disk: 50 GiB.
Select a system disk that meets the requirements.
Data Disk
Minimum requirements for Data Disk: 100 GiB.
Click Add Data Disk and select a data disk that meets the requirements.
Enable backup
Configure those parameters based on your service needs.
Network
VPC
Configure those parameters based on your service needs.
After the configuration, record the selected VPC and subnet information, which will be used later.
Primary NIC
Security Group
Configure this parameter as required.
Public Network Access
Configure this as required.
Instance Management
Configure this parameter based on your needs.
After the configuration, record the settings for ECS Name, Username, and Password.
Advanced Settings
Configure parameters as required.
Quantity
Configure this parameter as needed.
- Check the configurations, select the agreement, and click Submit.
- On the order page, select a payment method and complete the payment.
Feedback
Was this page helpful?
Provide feedbackThank you very much for your feedback. We will continue working to improve the documentation.