OVAESX OVA Setup Guide

Download PDF

Table of Contents

Request OVA Image Files

To request access to the OVA image files, visit the Virtual Images section in the Exabeam Community.

Note

Please review all specifications for your platform and ensure you have sufficient resources to deploy Exabeam images. Additionally, please ensure you have valid Exabeam licenses for the product(s) you will implement.

Exabeam Platform Specification Table for Virtual Platforms

These are the minimum operating specifications needed to run your Exabeam product. We do not support hybrid deployments (cross environment deployments). All nodes must be in the same subnet.

Be aware that vCPU is not the same as the number of CPUs or Cores for the processor. A vCPU is typically equal to the number of threads in the processor.

The tables below details the CPU and memory allocation required for Exabeam products to operate optimally, with the following provisioned:

  • The host is not shared with any other product or resource

  • For OVA deployments, additional RAM and vCPUs allocated to the hypervisor (i.e. not allocated to any other VM).

    • We recommend additional 4 core to any VM for the OS/hypervisor

    • We recommend reserving a minimum 10 GB of RAM for the hypervisor, exclusively and not shared with any VM

    • Required configurations for storage:

      • HDDs and SSDs must be local or connected through an iSCSI or Fiber Channel backplane of 10 GB or more

      • Do not use NFS or SAN

      • Do not use VMFS with extents spread across multiple drives and managed by ESX

      • The SSD drive files MUST be put on an SSD backed data store, otherwise performance will be impacted

      • Disk storage is required to be configured with thick provisioning (eager zeroed recommended)

      • Network card must support paravirtualization (VMXNet v.3 adapters)

Advanced Analytics Node Type

OVA

Advanced Analytics Master Node

vCPU: 40 (Intel Xeon Ivy Bridge or newer processor)

Memory: 256 GB

Storage:

  • 1 x 200 GiB (SSD)

  • 3 x 803 GiB (SSD)

  • 6 x 1.63 TiB (HDD)

Advanced Analytics Worker

Incident Responder Node

vCPU: 16 (Intel Xeon Ivy Bridge or newer processor)

Memory: 128 GB

Storage:

  • 1 x 200 GiB (SSD)

  • 3 x 803 GiB (SSD)

  • 6 x 1.63 TiB (HDD)

Table 1. Advanced Analytics Node Specifications


Node Type in Exabeam Cluster

OVA

Before I32*

Data Lake Master

Data Lake Worker Nodes

vCPU: 16 (Intel Xeon Ivy Bridge or newer processor)

Memory: 128 GB

Storage:

  • 1 x 150 GiB (SSD)

  • 2 x 2000 GiB (SSD)

  • 9 x 2000 GiB (HDD)

I32 or higher

Data Lake Master

Data Lake Worker Nodes

vCPU: 16 (Intel Xeon Ivy Bridge or newer processor)

Memory: 192 GB

Storage:

  • 1 x 200 GiB (SSD)

  • 2 x 1.57 TiB (SSD)

  • 9 x 3.27 TiB (HDD)

Table 2. Data Lake Node Specifications


(* If you have an existing Data Lake deployment of 20 nodes or below, we will continue to support the older sizing for up to i32 only. Please contact the Exabeam Technical Account Manager for your team for any questions. )

For clusters with 21 nodes or more, an additional three management nodes are required for cluster management operations, health monitoring and other critical functions.