Cisco Stealthwatch Manuale utente

Cisco Stealthwatch

Data Store Hardware Deployment and Configuration Guide 7.3.2

Table of Contents

Data Store Installation and Configuration Introduction 5

Overview 5

Audience 5

How to Use This Guide 5

Data Store Concepts and Architecture 7

Data Store Deployment Prerequisites and Recommendations 13

Stealthwatch Version Support 13

Stealthwatch Licensing 13

Stealthwatch Hardware Compatibility and Networking Requirements 13

Stealthwatch Management Console VE 15

Data Store Deployment Required Credentials 15

Data Store Networking and Switching Considerations 15

Data Store Deployment Requirements and Considerations 20

Data Store Communications Ports 21

Stealthwatch with a Data Store Deployment Overview 25

Data Store Installation 26

Stealthwatch Hardware Deployment and Considerations 26

SMC Configuration for Use with a Data Store 26

Data Store Initial Deployment and Configuration 27

Flow Collector Configuration for Use with a Data Store 29

Data Store Initialization and Configuration 30

UDPDirector (Optional)Deployment 33

Flow Sensor (Optional)Deployment 33

Failover Stealthwatch Management Console (Optional)Deployment 33

Flow Interface Statistics Retention Configuration 34

Data Store Installation Next Steps 40

Data Store Maintenance 41

Restart a Data Node 41

Restart the Data Store 42

Creating a Data Store Backup 43

Restoring a Data Store Backup 48

Adding Three Data Nodes to the Data Store 50

Preparing the Data Store for Adding Data Nodes and Rebalancing 50

Adding Data Nodes to the Data Store 51

Removing a Data Node from the Data Store 52

Replace a Data Node with a Spare Data Node with a Different IPAddress 53

Preparing the Data Store for Replacing a Failed Data Node 53

Replace the Data Node 53

Adding SMCs and Flow Collectors after you Initialize the Data Store 55

Data Store Deployment Troubleshooting 57

Hardware Deployment Troubleshooting 57

Data Store Troubleshooting 57

Appendix A.Installation Preparation 60

Installation Warnings 60

Installation Guidelines 62

Safety Recommendations 64

Maintain Safety with Electricity 64

Prevent ESD Damage 65

Site Environment 65

Power Supply Considerations 65

Rack Configuration Considerations 66

Appendix B.Stealthwatch Hardware Installation 67

Mounting Your Appliance 67

Hardware Included with the Appliance 67

Additional Required Hardware 67

Connecting Your Appliance to the Network 68

Connecting to Your Appliance 70

Connecting with a Keyboard and a Monitor 70

Connecting with a Laptop 71

Configuring Network Settings Using First Time Setup 72

General Stealthwatch Appliance Configuration 72

Data Store-Compatible Appliances (SMC 2210, FC 4210) 74

Data Node Configuration 78

Changing the Sysadmin User Password 82

Changing the Root User Password 82

Appendix C. Configuring Your Appliances 84

Appliance Setup Tool Requirements 84

Managed 84

SMC Failover 84

Best Practices 84

Configuration Order 85

1. Log In 86

2. Configure the Appliance 86

3. Register the Stealthwatch Management Console 88

4. Add Appliances to Central Management 89

5. Confirm Appliance Status 90

Data Store Installation and Configuration

Introduction

Overview

This guide explains how to install the Stealthwatch Data Store as part of a Stealthwatch

System deployment. It describes the Stealthwatch System components and how they

are placed in the system, especially in relation to the Data Store.

This chapter includes the following topics:

lAudience

lHow to Use This Guide

Audience

This guide is designed for the person responsible for installing Stealthwatch system

hardware. We assume that you already have some general understanding of installing

hardware network equipment (Flow Collector and the Stealthwatch Management

Console).

For information on configuring Stealthwatch products, please refer to the Stealthwatch

System Configuration Guide.

How to Use This Guide

In addition to this introduction, we have divided this guide into the following chapters:

Chapter Description

Data Store Concepts and

Architecture

Describes basic concepts underpinning the Data

Store database, and basic architecture related to

Data Store deployment in relation to an SMCand

Flow Collectors.

Data Store Deployment

Prerequisites and

Recommendations

Describes Stealthwatch appliances compatible

with the Data Store, and provides requirements

and recommendations for deploying your Data

Store, including communication ports to open.

Stealthwatch with a Data Provides a high-level overview of deploying

Data Store Installation and Configuration Introduction

Chapter Description

Store Deployment Overview Stealthwatch appliances for use with a Data Store.

Data Store Installation

Provides an end-to-end overview of deploying

Stealthwatch appliances for use with a Data Store,

and configuration instructions to initialize the Data

Store database.

Flow Interface Statistics

Retention Configuration

Provides information on configuring Data Store

flow interface statistics data retention period.

Data Store Installation Next

Steps

Describes the next steps after you finish deploying

and configuring your Data Store.

Data Store Maintenance Describes Data Store maintenance tasks.

Data Store Deployment

Troubleshooting

Describes common issues seen during the Data

Store installation process, and suggested

solutions.

Appendix A.Installation

Preparation Provides warnings for installing hardware.

Appendix B.Stealthwatch

Hardware Installation

Provides an overview for installing Stealthwatch

appliances and performing initial configuration to

assign an IPaddress and other related

management information.

Appendix C. Configuring Your

Appliances

Provides an overview for using Appliance Setup

Tool to configure your Stealthwatch appliances.

Data Store Installation and Configuration Introduction

Data Store Concepts and Architecture

The Stealthwatch Data Store provides a central repository to store your network's

telemetry, collected by your Stealthwatch Flow Collectors. The Data Store is comprised

of a cluster of Data Nodes, each containing a portion of your data, and a backup of a

separate Data Node's data. Because all of your data is in one centralized database, as

opposed to spread across multiple Flow Collectors, your Stealthwatch Management

Console can retrieve query results from the Data Store more quickly than if it queried all

of your Flow Collectors separately. The Data Store cluster provides improved fault

tolerance, improved query response, and quicker graph and chart population.

Data Store Storage and Fault Tolerance

The Data Store collects data from Flow Collectors and distributes it equally across Data

Nodes within the cluster. Each Data Node, in addition to storing a portion of your overall

telemetry, also stores a backup of another Data Node's telemetry. Storing data in this

fashion:

lhelps with load balancing

ldistributes processing across each node

lensures all data ingested into the Data Store has a backup for fault tolerance

lallows for increasing the number of Data Nodes to improve overall storage and

query performance

Data Store Concepts and Architecture

If a node goes down, as long as the node containing its backup is still available, and at

least half of your total number of Data Nodes are still up, the overall Data Store remains

up. This allows you time to repair the downed connection or faulty hardware; after you

replace the faulty Data Node, the Data Store restores that node's data from the existing

backup stored on the adjacent Data Node, and creates a backup of data on that Data

Node. See the following diagram for an example of how Data Nodes store telemetry:

Data Store Concepts and Architecture

Stealthwatch Data Store Deployment Architecture

In a Stealthwatch deployment without a Data Store, one or more Flow Collectors ingests

and deduplicates data, performs analysis, and reports data and results directly to the

SMC. To resolve user-submitted queries, including graphs and charts, the SMCqueries

all of the managed Flow Collectors. Each Flow Collector returns matching results to the

SMC. The SMC collates the information from the different result sets, then generates a

graph or chart displaying the results. In this deployment, each Flow Collector stores data

on a local database. See the following diagram for an example.

Data Store Concepts and Architecture

In a Stealthwatch deployment with a Data Store, the Data Store cluster sits between

your SMC and Flow Collectors. One or more Flow Collectors ingests and deduplicates

flows, performs analysis, and reports data and results directly to the Data Store,

distributing it roughly equally to all of the Data Nodes. The Data Store facilitates data

storage, keeps all of your traffic in that centralized location as opposed to spread across

multiple Flow Collectors, and offers greater storage capacity than multiple Flow

Collectors. See the following diagram for an example.

To resolve user-submitted queries, including graphs and charts, the SMCqueries the

Data Store. The Data Store finds matching results in the columns relevant to the query,

then retrieves the matching rows and returns the query results to the SMC. The SMC

generates the graph or chart without needing to collate multiple result sets from multiple

Flow Collectors. This reduces the cost of querying, as compared to querying multiple

Flow Collectors, and improves query performance.

Data Store Concepts and Architecture

Indice

Altri manuali Cisco Magazzinaggio

Cisco

Cisco Linksys NMH410 Manuale utente

Cisco

Cisco CSS8-IDM-MEM-HD Manuale utente

Cisco

Cisco Smart Storage NSS322 Manuale utente

Cisco

Cisco Cisco MDS 9506 Manuale utente

Cisco

Cisco NSS 300 Series Manuale utente

Cisco

Cisco MEM-C6KNAM-2GB Guida rapida

Cisco

Cisco 2691 Series Manuale di istruzioni

Cisco

Cisco NSS32 Manuale di istruzioni

Cisco

Cisco NSS 324 Manuale di istruzioni

Cisco

Cisco 4000 Series Guida rapida

Cisco

Cisco UCS C480 M5 Manuale utente

Cisco

Cisco Memory Card MEMCUE-256D= Manuale utente

Cisco

Cisco MDS 9509 Manuale utente

Cisco

Cisco UCS Invicta C3124SA Manuale utente

Cisco

Cisco C880 M4 Manuale utente

Cisco

Cisco UCS S3260 Manuale utente

Cisco

Cisco Linksys NSLU2 Manuale utente

Cisco

Cisco Network Storage System NSS3000 Series Manuale di istruzioni

Cisco

Cisco NSS 324 Manuale utente

Cisco

Cisco C880 M4 Manuale utente

Cisco

Cisco MEM2600-4D Guida rapida

Cisco

Cisco Small Business NSS 322 Smart Storage Manuale utente

Manuali Magazzinaggio popolari di altre marche

QNAP

QNAP TS 32PXU Series Manuale utente

LaCie

LaCie RUGGED RAID Manuale utente

Freecom

Freecom CLS DOCK Manuale utente

PNY

PNY Attache P-FD64MBATT3 Manuale utente

HP StorageWorks MSL2024 Manuale utente

OLT

OLT 6x6 Maximizer Manuale utente

Transcend

Transcend JetFlash 160 Manuale utente

LaCie

LaCie RUGGED MINI Manuale utente

Thunderbolt

Thunderbolt 600 Manuale utente

Panasonic

Panasonic LB-DH8 series Manuale

Intel

Intel RAID High Availability Manuale utente

LaCie

LaCie 12big Thunderbolt 3 Manuale utente

Spectra Logic

Spectra Logic T-Series Spectra T50e Manuale utente

Panasonic

Panasonic LKM-F931-1 Manuale utente

Tabernus

Tabernus Enterprise Erase E2400 Manuale utente

Rocstor

Rocstor COMMANDER 3F series Manuale utente

HP P9000 Manuale utente

Western Digital

Western Digital Ultrastar Data60 Manuale utente