Step 7: Install the Log Collection Component (Logstash)

Installing the Log Collection Component

1. Log in to the management console.
2. Click in the upper left corner of the page and choose Security & Compliance > SecMaster.
3. In the navigation pane on the left, choose Workspaces > Management. In the workspace list, click the name of the target workspace.
   Figure 1 Workspace management page
   

4. In the navigation pane on the left, choose Settings > Components. Then, select the Components tab.
   Figure 2 Accessing the Components tab
   

5. On the Components tab page, click Edit Settings in the upper right corner of the component to be viewed. The configuration management page of the component is displayed on the right.
6. In the Node Configuration area, click Add in the upper left corner of the node list. In the Add Node dialog box displayed, select the ECS node prepared in (Optional) Step 1: Buy an ECS and click OK.
7. On the Configuration Management page, click Save and Apply in the lower right corner.

   Wait for a period of time. When the component status changes to Applied completed, the Logstash collector has been installed on the current node.

   Figure 3 Configuration completed