EclecticIQ Intelligence Center documentation

Release notes

Latest release notes:

• Minor release 3.5

• Maintenance release 3.4.3

• Maintenance Release 3.3.3

See also: All release notes

Install and upgrade EclecticIQ Intelligence Center

Upgrade operating system

When upgrading an EclecticIQ Intelligence Center instance on hosts running older operating systems such as CentOS 7 or RHEL 7, you must upgrade the operating system to Rocky Linux 8 or 9 or RHEL 8 before attempting to install or upgrade EclecticIQ Intelligence Center 3.0 and newer. See:

• Upgrade OS: CentOS 7 to Rocky Linux 8 or 9

• Upgrade OS: RHEL 7 to RHEL 8

(Recommended) Use Ansible playbooks to install and upgrade EclecticIQ Intelligence Center (EIQ IC).

• Installation: This guides you through installing EIQ IC to one or more nodes.

• Upgrade EIQ IC (2.14 > 3.0, 3.x > 3.y): Upgrade EIQ IC 2.14 to 3.0, or within 3.x.

• Upgrade EIQ IC (2.x only): Upgrade EIQ IC 2.x to 2.14.

• Install offline (“airgapped”)

Manual install instruction

You are strongly advised to use the playbooks instead of installing manually.

To install EIQ IC manually

• On Rocky Linux

• On RHEL

Install extensions:

• Install legacy extensions

Configure EclecticIQ Intelligence Center

General configuration options:

• Intelligence Center system settings

• Update platform_settings.py

• External services for EclecticIQ Intelligence Center.

• External authentication

• Audit log settings

Work with EclecticIQ Intelligence Center

• Use EclecticIQ Intelligence Center

Incoming feeds, outgoing feeds, enrichers

• Ingest data from external sources with Create | Incoming Feeds.

• Disseminate intelligence using Outgoing feeds.

• Enrich and pivot intelligence using Use | Enrichment | About.

• Integrate with third party applications with Apps.

For a list of extensions bundled with EclecticIQ Intelligence Center, see EclecticIQ Integrations.