Configuring Data Collection Connection from BI.ZONE EDR
Legend:
${LS_HOME} - Logstash home directory, typically /app/logstash
General Description
Configuration for collecting data from the BI.ZONE EDR server is performed by setting up Smart Monitor Data Collector configurations.
Generating BI.ZONE EDR API Token
-
Log in to the
BI.ZONE EDRweb interface
-
Go to the
My Profile-API Tokenssection
-
Create an API token and copy it for further use

After creation, the API token will not be visible for viewing. Save it during the module installation.
Adding Variables to the Keystore
To implement data collection, variables with identification and authentication data for BI.ZONE EDR must be added to the Smart Monitor Data Collector keystore.
Execute the following commands sequentially:
sudo -u logstash ${LS_HOME}/bin/logstash-keystore add bizone_token
sudo -u logstash ${LS_HOME}/bin/logstash-keystore add bizone_user
sudo -u logstash ${LS_HOME}/bin/logstash-keystore add bizone_password
Installing Smart Monitor Data Collector Configurations
Configuration files (pipelines) are supplied with the module and require
additional editing in accordance
with the addressing of your Smart Monitor and BI.ZONE EDR installations.
In the .conf configuration files, edit the following parameters:
"BIZONE_HOST"in the input section - replace with the actual address of theBI.ZONE EDRserver"HOST_OS_DATA"in the output section - replace with the actual address of theSmart Monitor Data Storagenode"KAFKA_SERVERS"in the input section - replace with the actual address of theBI.ZONE EDRKafka server
In configuration files using Kafka as a data source, topic names are specified.
Change them if your BI.ZONE EDR installation uses topics with different names for writing.
To install the configuration files, perform the following actions:
- Go to the
Smart Monitor Data Collectorhost - Place the
.confpipeline files and thebizonefolder containing scripts in the${LS_HOME}/config/conf.ddirectory - Add the pipelines to the
pipelines.ymlfile. More details can be found in the corresponding section in the Typical Pipeline Creation Guide - Restart the
Smart Monitor Data Collectornode using the following command:
systemctl restart logstash