Skip to main content
Ctrl+K
Logo image Logo image

Intelligence Center 3.3.3 Docs

Site Navigation

  • Release Notes
  • Install Configure Upgrade
  • Get to know EclecticIQ Intelligence Center
  • Work with intelligence
  • Integrations

Section Navigation

  • EclecticIQ Intelligence Center installation playbooks
    • Deployment architecture guidance
    • Installation playbooks 2.x
      • Prepare nodes
      • Run installation playbooks
      • Upgrade with playbooks
    • Installation playbooks 3.x
      • Changelog
      • Prepare nodes
      • New install with playbooks
      • Upgrade with playbooks
      • Back up and restore with playbooks
    • Appendix
    • Glossary
  • EclecticIQ Intelligence Center on Rocky Linux
    • Backup guidelines Rocky Linux
    • Configure EclecticIQ Intelligence Center on Rocky Linux
    • Install EclecticIQ Intelligence Center on Rocky Linux
      • Before you start Rocky Linux
      • About the install script Rocky Linux
      • Check the requirements Rocky Linux
      • Set up the repositories Rocky Linux
      • Install on one machine Rocky Linux
      • Install on two machines Rocky Linux
      • Perform a distributed installation Rocky Linux
      • Migrate databases
    • Upgrade EclecticIQ Intelligence Center on Rocky Linux
      • Upgrade OS: CentOS 7 to Rocky Linux 8
      • Before you upgrade Rocky Linux
      • Before you upgrade: Elasticsearch 7 Rocky Linux
      • Upgrade EclecticIQ Intelligence Center Rocky Linux
      • After upgrading Rocky Linux
    • Reference Rocky Linux
      • Packaging system Rocky Linux
      • Ingestion for Sysadmins Rocky Linux
      • Config and log files Rocky Linux
      • Whitelist URLs Rocky Linux
      • Default users Rocky Linux
      • Default access permissions Rocky Linux
      • Statsite reference Rocky Linux
  • EclecticIQ Intelligence Center on RHEL
    • Backup guidelines RHEL
    • Configure EclecticIQ Intelligence Center on RHEL
    • Install EclecticIQ Intelligence Center on RHEL
      • Before you start RHEL
      • About the install script RHEL
      • Check the requirements RHEL
      • Set up the repositories RHEL
      • Install on one machine RHEL
      • Install on two machines RHEL
      • Perform a distributed installation RHEL
      • Migrate databases RHEL
    • Upgrade EclecticIQ Intelligence Center on RHEL
      • Upgrade OS: RHEL 7 to RHEL 8
      • Before you upgrade RHEL
      • Before you upgrade: Elasticsearch 7 RHEL
      • Upgrade EclecticIQ Intelligence Center RHEL
      • After upgrading RHEL
    • Reference RHEL
      • Packaging system RHEL
      • Ingestion for Sysadmins RHEL
      • Config and log files RHEL
      • Whitelist URLs RHEL
      • Default users RHEL
      • Default access permissions RHEL
      • Statsite reference RHEL
  • Install offline
    • Before you start offline
    • Install from an offline location
  • Configure Intelligence Center settings
    • Update platform_settings.py
    • Run diagnostic tests
    • Monitor system health
    • Check ingestion performance
    • Check sequence generation capabilities
    • Install the extensions
    • eiq-platform command line
    • Intelligence Center system settings
      • Configure general settings
      • EclecticIQ Labs
      • Register the license
      • View system jobs
      • Check system health
      • Private key
      • Trusted keys
      • Configure TAXII
      • Configure STIX
    • Configure services
      • Set logging levels
      • Configure a proxy
      • Configure Postfix
      • Configure SSL and HTTPS in Nginx
      • Configure custom SSL for Logstash
      • Tune PostgreSQL performance Rocky Linux
      • ElasticSearch performance
      • Elasticsearch: Sync the search database
      • Elasticsearch 7: “Data too large”
      • Configure Opentaxii server
    • Configure external authentication systems
      • Managing external users
      • Set up LDAP
      • Set up LDAP and AD authentication
      • Set up SAML authentication
      • Set up OAuth 2.0 and Azure AD
      • Set up SAML with Azure AD
    • Audit the system
      • Audit trail logs
      • Stream audit logs to Kafka
      • Stream audit logs to Elasticsearch
      • Stream audit logs to Splunk
  • License information
    • Offer to provide source code
    • License information backend and API
    • License information frontend and UI
      • License information frontend and UI - 1
      • License information frontend and UI - 2
      • License information frontend and UI - 3
      • License information frontend and UI - 4
      • License information frontend and UI - 5
      • License information frontend and UI - 6
      • License information frontend and UI - 7
      • License information frontend and UI - 8
      • License information frontend and UI - 9
      • License information frontend and UI - 10
      • License information frontend and UI - 11
      • License information frontend and UI - 12
      • License information frontend and UI - 13
      • License information frontend and UI - 14
      • License information frontend and UI - 15
      • License information frontend and UI - 16
      • License information frontend and UI - 17
      • License information frontend and UI - 18
      • License information frontend and UI - 19

Audit the system#

  • Audit trail logs
  • Stream audit logs to Kafka
  • Stream audit logs to Elasticsearch
  • Stream audit logs to Splunk

previous

Set up SAML with Azure AD

next

Audit trail logs