Configure Intelligence Center settings

This section contains information on how to configure and manage EclecticIQ Intelligence Center and the software that it depends on.

Note

Requires root or administrator access to these systems.

• Update platform_settings.py describes how you can configure your Intelligence Center instance using the platform_settings.py file.

• Intelligence Center system settings describes how to configure your Intelligence Center instance through the UI.

• Configure services has configuration instructions for services (e.g., PostgreSQL, Elasticsearch) that EclecticIQ Intelligence Center depends on.

• Configure external authentication systems has configuration instructions for external authentication services such as SAML.

• eiq-platform command line is a brief reference for the eiq-platform command line tool.

• Since 2.8, EclecticIQ Intelligence Center comes with EclecticIQ extensions installed by default.

  If you need to install or upgrade an extension manually, see Install the extensions.

• For guidelines on how to monitor the health of your Intelligence Center and its related services, see:

  • Run diagnostic tests

  • Audit the system

  • Monitor system health

  • Check ingestion performance

In this section

General

• Update platform_settings.py
• Run diagnostic tests
• Monitor system health
• Check ingestion performance
• Check sequence generation capabilities
• Install the extensions
• eiq-platform command line

System settings

• Intelligence Center system settings
  • Configure general settings
  • EclecticIQ Labs
  • Register the license
  • View system jobs
  • Check system health
  • Private key
  • Trusted keys

External services

• Configure services
  • Set logging levels
  • Configure a proxy
  • Configure Postfix
  • Configure SSL and HTTPS in Nginx
  • Configure custom SSL for Logstash
  • Tune PostgreSQL performance Rocky Linux
  • ElasticSearch performance
  • Elasticsearch: Sync the search database
  • Elasticsearch 7: “Data too large”
  • Configure Opentaxii server

External authentication systems

• Configure external authentication systems
  • Managing external users
  • Set up LDAP
  • Set up LDAP and AD authentication
  • Set up SAML authentication
  • Set up OAuth 2.0 and Azure AD
  • Set up SAML with Azure AD

Audit logs

• Audit the system
  • Audit trail logs
  • Stream audit logs to Kafka
  • Stream audit logs to Elasticsearch
  • Stream audit logs to Splunk