Lumu Virtual Appliance - Manage Collectors

Virtual Appliance Collectors

The Lumu Virtual Appliance (VA) offers the option to create VA collectors, a seamless way to integrate network metadata, as well as send your DNS logs through the VA instead of using the VA built-in DNS resolver. In this quick guide, we show you how to have your VA collectors up and running in minutes.

A Virtual Appliance Collector work as a processing mechanism that provides the ability to gather network metadata in a quick and straightforward manner. If you are interested in getting started with Lumu VA, access our Lumu Virtual Appliance documentation.
Lumu VA with collectors general architectureFigure 1 - Lumu VA with collectors general architecture.

Requirements

  1. The latest version of the Lumu Virtual Appliance configured.
To make sure you are running the latest Lumu VA version, simply run the command lumu-appliance upgrade, this will upgrade the VA to the latest version. Consult the VA Command Quick Reference for more information.
To have your VA collector up and running in minutes, follow three simple steps:


Create VA Collectors

The first step is to add your VA collector in the Lumu Portal. For this, navigate to the Collectors > Virtual Appliance menu, click on the VA in which you want to add the collector, then click on the “Add Collector” button.

Collectors management area on Lumu PortalFigure 3 - Collectors management area on Lumu Portal.

When creating a Virtual Appliance, you are required to provide the following information:

  1. Name : a name for your VA collector.
  2. Type : the type of metadata you want this VA collector to process.
Creating a VA collector Figure 4 - Creating a VA collector.

Once created, the Collectors will be shown on the VA details page:

VA collector details areaFigure 5 - VA collector details area.
You can create up to 5 VA collectors per Lumu Virtual Appliance as per performance considerations. If you want to create more than 5 Collectors you should deploy a new VA.

Configure VA Collectors

Once the Virtual Appliance Collector has been added to the Lumu Portal, it’s time to configure it to send data to Lumu. Consult our documentation for details.

Manage VA Collectors

To edit a VA collector’s details, navigate to the Virtual Appliances menu of the Lumu Portal and click on the VA that contains the VA collector. On the Virtual Appliance details page, click on the “Edit” icon of the VA collector you want to edit (as shown in figure 6).

The information you edit on the Lumu Portal will be synchronized with the Lumu VA automatically.

To delete a VA collector, navigate to the Virtual Appliances menu, and click on the VA that contains the VA collector. On the Virtual Appliance details page, click on the delete icon of the VA collector you want to remove (as shown in figure 6).

This will permanently delete the VA collector on the Lumu Portal and on the Lumu VA. This action can not be undone.
Manage VA collectors Figure 6 - Manage VA collectors.

        • Related Articles

        • Configure VA Collectors

          Once the Virtual Appliance Collector has been added to the Lumu Portal, it is time to configure the VA Collector to send data to Lumu. If you are interested in getting started with Virtual Appliance Collector, access our documentation. Refresh the VA ...
        • Lumu Virtual Appliance

          The Lumu Virtual Appliance (VA) is a pre-configured lightweight virtual machine solution provided by Lumu Technologies to enable the collection of network metadata of your entire enterprise and forward it to the Lumu cloud with the lowest impact on ...
        • Configure Virtual Appliance

          Once the Virtual Appliance (VA) has been added to the Lumu Portal and imported into a hypervisor it is time to configure the Lumu VA to collect network metadata to illuminate threats, attacks, and adversaries coming from your network. If you are ...
        • Manage Virtual Appliances

          You have the option to manage Virtual Appliances (VA) directly from the Lumu Portal. The virtual appliance allows for full visibility into the compromises inside your network and is available for the main hypervisors. If you are interested in getting ...
        • Lumu VA and Packetbeat

          The Lumu Virtual Appliance (VA) offers the option to create Collectors, a seamless way to integrate with network metadata. In this quick guide, we show you how to configure Packetbeat in a Windows Server for DNS packet collection. Figure 1 - Network ...