Step 9: Configure a Connector

1. On the Connections tab, click Add.
2. Configure the data connection source details.
   Figure 3 Source
   

   The following uses UDP and TCP as examples. For more connection types, see Rules for Configuring Connectors.

   • Connection type: UDP

     Table 1 Log source

     Parameter	Description
     Connection Method	Select Source.
     Connection Type	Select UDP.
     Title	Name of the data connection source.
     Description	Customize the data source description.
     Port	Retain the default value.
     Codec	Retain the default value.
     Advanced Settings	No configuration is required.

   • Connection type: TCP

     Table 2 Log source

     Parameter	Description
     Connection Method	Select Source.
     Connection Type	Select TCP.
     Title	Name of the data connection source.
     Description	Customize the data source description.
     Port	Retain the default value. Ensure that the port number is different from those used by other sources.
     Codec	If the original log format is not JSON, select Plain.
     Packet label	No configuration is required.

3. After the setting is complete, click Confirm in the lower right corner of the page.

1. On the Connections tab, click Add.
2. Configure the data connection destination details.
   Figure 4 Destination
   

   Table 3 Log transfer destination

   Parameter	Description
   Connection Method	Select Destination.
   Connection Type	Select SecMaster.
   Title	Customize the destination name of the data connection.
   Description	Description of the connection destination.
   Type	User-defined log destination type.
   Pipe	Select the name of the pipeline created in (Optional) Step 8: Creating a Log Storage Pipeline.
   Domain_name	Enter the domain account information of the IAM user used to log in to the console.
   User_name	Enter the user information of the IAM user used to log in to the console.
   Password	Enter the password of the current login IAM user.
   Advanced Settings	No configuration is required.

3. After the setting is complete, click Confirm in the lower right corner of the page.

1. On the Connections tab, click Add.
2. Configure the data connection source details.

   Table 4 Log source

   Parameter	Description
   Connection Method	Select Source.
   Connection Type	Select SecMaster.
   Title	Customize the destination name of the data connection. Naming rules: The name can contain 5 to 128 characters. The name must be unique in the workspace and cannot be the same as the name of any other connector in the workspace.
   Description	Description of the connection destination. Naming rules: The name can contain up to 256 characters.
   Type	User-defined log destination type. The recommended value is ECS Agency. Select this option if you want to obtain tokens through ECS agencies. In doing this, the data collection function is not affected even if the account or password changes. Before using an ECS agency, create an isap-agent agency and grant permissions to it in IAM, and configure the agency in ECS. For details, see Creating the isap-agent Agency and Granting Permissions to it in IAM and Configuring an Agency in ECS.
   Pipe	Select the name of the pipeline created in (Optional) Step 8: Creating a Log Storage Pipeline.
   Subscription_type	Subscription type. Retain the default value. Shared: shared mode Exclusive: exclusive mode Failover: disaster recovery mode
   Subscription_initial_position	Initial subscription position. Retain the default value. Latest: The data is consumed from the latest position of the topic corresponding to the stream table. Earliest: The data is consumed from the earliest position of the topic corresponding to the stream table.

3. After the setting is complete, click Confirm in the lower right corner of the page.

On the Connections page, click Add and configure data connection destination parameters.

Set this parameter based on the site requirements. For more connection types, see Connector Rules.

• Agency Name: Enter isap-agent.
• Agency Type: Select Cloud service.
• Cloud Service: Select Elastic Cloud Server (ECS) and Bare Metal Server (BMS) from the drop-down list.
• Validity Period: Select Unlimited.
• Description: Provide a description if needed.

IAM 3.0 (IAM3): Click OK. In the displayed dialog box, click Authorize.

IAM 5.0 (IAM5): On the Agencies page, configure parameters and click OK in the lower right corner. In the confirmation dialog box, click Cancel. Then, click Go to New Console in the upper right corner of the agency page to go to the identity policy page (IAM5).

IAM 5.0 (IAM5): On the Identity Policies page, click Create Identity Policy in the upper right corner. On the Create Identity Policy page, configure the following parameters:

• Policy Name: isap-agent-strategy is recommended.
• Policy View: Select JSON.
• Policy Content. Copy and paste the following content into the box to replace the existing content:

  {
    "Version": "5.0",
    "Statement": [
      {
        "Effect": "Allow",
        "Action": [
          "secmaster:workspace:get",
          "secmaster:node:create",
          "secmaster:node:monitor",
          "secmaster:node:taskQueueDetail",
          "secmaster:node:updateTaskNodeStatus"
        ]
      }
    ]
  }

• Description: You are advised to enter a brief description for action authorization for the isap-agent agency.