Step 7: Install the Log Collection Component (Logstash)

Installing the Log Collection Component

1. Log in to the SecMaster console.
2. In the navigation pane on the left, choose Workspaces > Management. In the workspace list, click the name of the target workspace.
   Figure 1 Workspace management page
   

3. In the navigation pane on the left, choose Log Audit > Components. Then, select the Components tab.
   Figure 2 Accessing the Components tab
   

4. On the Components tab page, click Edit Settings in the upper right corner of the component to be viewed. The configuration management page of the component is displayed on the right.
5. In the Node Configuration area, click Add in the upper left corner of the node list. In the Add Node dialog box displayed, select the node in (Optional) Step 1: Buy an ECS and click OK.
6. On the Configuration Management page, click Save and Apply in the lower right corner.

   Wait for a period of time. When the component status changes to Applied completed, the Logstash collector has been installed on the current node.