Deploy the ExtraHop Explore Appliance in Azure
In this guide, you will learn how to deploy an ExtraHop Explore virtual appliance in a Microsoft Azure environment and join multiple Explore appliances to create an Explore cluster.
System requirements
Your environment must meet the following requirements to deploy a virtual Explore appliance:
- An Explore appliance product key
- An Azure storage account
- A Linux, Mac, or Windows client with the latest version of Azure CLI installed.
- The ExtraHop Explore 5100v virtual hard disk (VHD) file, available on the ExtraHop Customer Portal
- An Azure instance size that most closely matches the Explore appliance VM size, as
listed below:
vCPUs Memory Datastore disk Azure Instance Size 4 8 GB RAM 150 GB to 500 GB Standard_F4s_v2 8 16 GB RAM 150 GB to 1.2 TB Standard_F8s_v2 16 32 GB RAM 150 GB to 2.5 TB Standard_F16s_v2 32 64 GB RAM 150 GB to 4.1 TB Standard_F32s_v2
Deploy the EXA 5100v
Before you begin
The procedures below assume that you do not have the required resource group, storage account, storage container, and network security group configured. If you already have these parameters configured, you can proceed to step 5 after you log into your Azure account.Next steps
Open a web browser and log into the Admin UI on the Explore appliance through the configured public IP address. The default login name is setup and the password is default.Complete the following procedures:
- Register your ExtraHop appliance
- Connect the Discover and Command appliances to Explore appliances
- Send record data to the Explore appliance
- Review the Explore Post-deployment Checklist and configure additional Explore appliance settings.
Create an Explore cluster
If you are deploying more than one Explore appliance, you can join the appliances together to create a cluster. For the best performance, data redundancy, and stability, you must configure at least three Explore appliances in an Explore cluster.
Before you begin
You must have already installed the Explore appliances in your environment before proceeding.In the following example, the Explore appliances have the following IP addresses:
- Node 1: 10.20.227.177
- Node 2: 10.20.227.178
- Node 3: 10.20.227.179
You will join nodes 2 and 3 to node 1 to create the Explore cluster.
Important: | Each node that you join must have the same configuration (physical or virtual) and the same ExtraHop firmware version. EXA 5100 and EXA 5200 physical appliances can be in the same cluster. |
Connect the Explore appliance to Discover and Command appliances
After you deploy the Explore appliance, you must establish a connection from all ExtraHop Discover and Command appliances to the Explore appliance before you can query records.
Important: | If you have an Explore cluster of three or more Explore nodes, connect the Discover appliance to each Explore node so that the Discover appliance can distribute the workload across the entire Explore cluster. |
Note: | If you manage all of your Discover appliances from a Command appliance, you only need to perform this procedure from the Command appliance. |
Next steps
Important: | If you only deployed a single Explore appliance, after you connect to your Discover or Command appliance, you must log into the Admin UI on the Explore appliance and set the 0. | to
Send record data to the Explore appliance
After your Explore appliance is connected to all of your Discover and Command appliances, you must configure the type of records you want to store.
Thank you for your feedback. Can we contact you to ask follow up questions?