Exabeam Site Collector for SaaSExabeam Site Collector

Table of Contents

Supported Exabeam Site Collector Changes

For a list of all options, use site-collector-installer.sh --help.

Below are supported changes you can make. For other changes, please contact your Exabeam Technical Account Manager.

  • Operating System updates

  • Site Collector server IP changes

    • Once the IP of the server has been changed, edit the below line appropriately in this file: /opt/kafka/config/server.properties

    • advertised.listeners=EXTERNAL_PLAINTEXT://MYIP:9092, EXTERNAL_SSL://MYIP:9093, INTERNAL_SSL://localhost:9094

    • Then, restart Kafka: sudo systemctl restart kafka

  • Log retention change (default is 24 hours)

    • Edit the below line appropriately in this file: /opt/kafka/config/server.properties

    • log.retention.hours=24

    • Then, restart Kafka: sudo systemctl restart kafka

  • RAM allocation to logstash

    • Edit the below lines appropriately in this file: /opt/logstash/config/jvm.options

      • -Xms16g

      • -Xmx16g

    • Then, restart Kafka: sudo systemctl restart logstash

  • RAM allocation to Kafka

    • Edit the numbers before the 'G' in this file: /opt/kafka/bin/kafka-server-start.sh

    • export KAFKA_HEAP_OPTS="-Xmx5G -Xms5G"

    • Then, restart Kafka: sudo systemctl restart kafka