Deploy the ExtraHop Command Appliance on a Linux KVM
This document provides information on how to install the ExtraHop Command virtual appliance on a Linux kernel-based virtual machine (KVM). This guide assumes that you are familiar with basic KVM administration.
If you have not already done so, download the ExtraHop Command virtual appliance file for KVM from the ExtraHop Customer Portal.
Important: | If you want to deploy more than one ExtraHop virtual appliance, create the new instance with the original deployment package or clone an existing instance that has never been started. |
Requirements
Before you can install the ExtraHop virtual appliance, make sure that your environment meets the following requirements:
- A KVM hypervisor environment capable of hosting a VM that has:
- 4 GB RAM
- Two vCPUs
- One 4 GB boot disk (virtio-scsi interface recommended)
- One 40 GB datastore disk (virtio-scsi interface recommended)
- An ExtraHop virtual appliance license key
Package contents
The installation package for KVM systems is a tar.gz file that contains the following items:
- ECA_KVM.xml
- The domain XML configuration file
- extrahop-boot.qcow2
- The boot disk
- extrahop-data.qcow2
- The datastore disk
Determine the best bridge configuration
Identify the bridge through which you will access the management interface of your Command appliance.
- Make sure the management bridge is accessible to the ExtraHop virtual appliance and to all users who must access the management interface.
- If you need to access the management interface from an external computer, configure a physical interface on the virtual management bridge.
- (Recommended) Configure separate bridges for the Command appliance management bridge and any bridge you will capture network traffic through on other ExtraHop appliances.
Edit the domain XML configuration file
After you identify the management bridge, edit the configuration file, and create the ExtraHop virtual appliance.
Configure a static IP address
By default, ExtraHop appliances ship with DHCP enabled. If your network does not support DHCP, you must configure a static address manually.
Register the ExtraHop appliance
Complete the following steps to apply a product key.
If you do not have a product key, contact your ExtraHop account team.
Tip: | To verify that your environment can resolve DNS entries for the
ExtraHop licensing server, open a terminal application on your Windows, Linux, or
Mac OS client and run the following
command:nslookup -type=NS d.extrahop.com If the name
resolution is successful, output similar to the following
appears:
Non-authoritative answer: d.extrahop.com nameserver = ns0.use.d.extrahop.com. d.extrahop.com nameserver = ns0.usw.d.extrahop.com. |
- In your browser, type the URL of the ExtraHop Admin UI, https://<extrahop_ip_address>/admin.
- Review the license agreement, select I Agree, and then click Submit.
- On the login screen, type setup for the username.
-
For the password, select from the following options:
- For 1U and 2U appliances, type the service tag number found on the pullout tab on the front of the appliance.
- For the EDA 1100, type the serial number displayed in the Appliance info section of the LCD menu. The serial number is also printed on the bottom of the appliance.
- For a virtual appliance, type default.
- Click Log In.
- In the Appliance Settings section, click License.
- Click Manage License.
- Click Register.
- Enter the product key and then click Register.
- Click Done.
Post-deployment actions
- Connect your Discover appliances. See the ExtraHop Command settings section in the ExtraHop Admin UI Guide.
- Add your Explore appliances. See the Configure an Explore cluster section in the ExtraHop Admin UI Guide.
- Review the Discover and Command Post-deployment Checklist and configure additional Command settings.
Thank you for your feedback. Can we contact you to ask follow up questions?