Installation

Created by Lakshmi Vasanth, Modified on Wed, 11 Jun at 9:17 PM by Jaseem Masood

Ceburu Installation Overview

Ceburu focuses on developing artificial intelligence-based network monitoring solutions, including asset and network management, metric logs, bandwidth, and database KPIs.


As our Ceburu application is designed in a modular approach, any one of the following modules or a combination of more than one can be configured to be run by the installer.  

  1. Network Monitoring 

  1. Asset Monitoring 

  1. Bandwidth Monitoring 

  1. DB Key Performance Indicators  

  1. Remote Connect 

  1. Patch Manager 


Installer Pre-Requisites

Before installing Ceburu on your system, there are a few requisites that must be satisfied to avoid installation errors or compatibility issues during the installation process.   We have categorized the pre-requisites based on the operating system as follows:


General Requirements for both Windows and Linux Installations

To install on both Windows and Linux, follow these general requirements:

  • Ceburu Portal: To enable portal.ceburu.com, ensure that Port 7878 is open. Refer to the Manage Network Group for the necessary Network set up. This will cover public IP, subnets, and other essential configuration required for the deployment.

  • The specified Probe Host IP must be contained within a permitted subnet range.

  • Network Monitoring: Set up port forwarding for ports 20050 and 20051, allowing access to IP address 3.231.54.55 in your router settings. These ports are typically open by default.

  • Bandwidth Management: For managing bandwidth, set up port forwarding for port 4739, allowing IP address 23.22.139.92 in your router's NetFlow collector.

  • Application Monitoring: To enable Application Performance Monitoring (APM), ensure that port 9200 is open.

  • Internal Port : 20050,20551 - > For internal communication Proxy and node.

  • Any endpoint protection software, including Microsoft Defender, must whitelist the Ceburu folder to prevent false positives and ensure smooth installation.

  • The probe machine and all associated subnets must be part of Active Directory.


Data Communication in Production:

Domain

IP

Types

Source Port

Destination

Dest. Port

Data Transfer By

portal.ceburu.com

34.232.239.35

Monitoring

Ephemeral

portal.ceburu.com

7878

API

portal.ceburu.com

34.232.239.35

Frontend

Ephemeral

portal.ceburu.com

443

Frontend

kpi.ceburu.com

23.22.139.92

Netflow

Ephemeral

Kpi.ceburu.com

4739

UDP

kpi.ceburu.com

23.22.139.92

APM

Ephemeral

Kpi.ceburu.com

9200

TCP

patch.ceburu.com

3.92.137.53

Patch

Ephemeral

patch.ceburu.com

8383

TCP

remo.ceburu.com

35.173.197.151

Remotely

Ephemeral

Remo.ceburu.com

443

TCP


Ceburu Pre-Request For Client Machine

 

Port List:

Sl.No

Source

Destination

Protocol

Port

Type

Description

1

Client

Probe

UDP

20050

Internal

To send Ceburu Agent monitoring metrics

2

Probe

Client

UDP

20051

Internal

To send remote command

3

Client

Probe

UDP

20052

Internal

To send DNS monitoring metrics

4

Client

Probe

TCP

8220

Internal

To send IIS, DBKPI monitoring metrics

5

Client

Probe

TCP

8200

Internal

To send APM monitoring metrics

6

Suricata Agent

Logstash Machine

TCP

5044

Internal

To send suricata monitoring metrics

7

Router/Switch

Aiops Proxy

UDP

5140

Internal

To send log mgmt monitoring metrics

8

Probe

portal.ceburu.com

TCP

7878

External

To send device monitoring metrics

9

Probe

kpi.ceburu.com

TCP

9200

External

To send elastic search(IIS, APM, DBKPI) metrics

10

Netflow Collector

kpi.ceburu.com

UDP

4739

External

To send netflow monitoring metrics

11

Client

siem.ceburu.com

TCP

1514
 1515

External

To send siems monitoring metrics

 
 

WinRM should be enabled:

  • Test WinRM:
    • Run the below command from the probe machine powershell.
      • Test-Wsman <Client machine IP>
      • Eg:- Test-Wsman 192.168.1.9
    • If Enable the output be like this:

  • If Not enabled the output be like this:

  • Enable WinRM:
    • Run the below command in the client machine powershell.
      • Enable-PSRemoting

 

System Requirement:

  • Windows:
    • Workstation -> 10 & above
    • Windows Server -> 2012 & above
  • Linux:
    • Ubuntu -> 20.04 & above
    • Redhat -> 7 & above
    • Centos -> 7 & above
  • System should have 2GB free storage.
  • System should have 4GB free RAM.


What is Ephemeral?

  • Ephemeral ports are temporary ports used for a brief period to establish connections between clients and servers on the internet.

  • These ports allow multiple connections to occur simultaneously without conflicts. For instance, a browser can use different ephemeral ports to connect to various websites at the same time


Internal Port : 20050,20551 - > For internal communication Proxy and node


Ensure that all devices are connected to the internet. Additionally, the Administrator Username and Password should be uniform across all devices within the specified subnet ranges on the Asset Network page to enable broadcasting.


Additional Requirements for Windows

In addition to the general requirements, a few extra steps are needed when installing Ceburu on Windows:

  • Operating System: Ensure that host workstations are running at least Windows 10, and servers are using at least Windows Server 2019 for proxy installation.

  • Probe Machine Specifications: The probe machine must have a minimum of 16 GB or 32 GB of RAM, while all other devices on the network should have at least 16 GB of RAM, 150 to 200 GB Disk space depending on the size of the network.

  • Administrator Permissions: Run the installer using the Run as Administrator option.

  • SSL Whitelisting: Add portal.ceburu.com to the whitelist to avoid SSL certificate issues.

  • Windows Defender Exclusion: Create a group policy to exclude the Ceburu folder from Windows Defender scans.

  • Firewall Configuration: Ensure that the firewall whitelists the xyz folder and its files to prevent disruptions.


Additional Requirements for Linux

Similarly, additional requirements must be met when installing Ceburu on Linux:

  • Operating System: Host workstations and servers should meet the same specifications as for Windows installations (Windows 10 for workstations, Windows Server 2019 for servers).

  • Probe Machine Specifications: The probe machine should have at least 16 GB or 32 GB of RAM, and all other devices on the network must have at least 16 GB of RAM.

  • Port 22 Configuration: Ensure that port 22 is enabled on all machines within the network.

  • SSH Protocol: All machines must have SSH protocol enabled and properly configured.


AIOps Proxy setup


Please configure any security software or antivirus programs to allow all applications within the following directory: C:\Program Files(x86)\Ceburu. This includes granting permissions to run and operate without restrictions.


System Requirements:

  • Linux OS: RHEL 8 or RHEL 9
  • Memory: Minimum of 16GB, scalable up to 32GB
  • Storage: Minimum of 500GB, scalable up to 1TB
  • Authentication: Must support AD credentials for access from the probe
  • Permissions: SUDO access required
  • Network: Open a port to allow data transfer to the cloud server at IP 54.208.250.12, Port 10051

Device Configuration and Data Monitoring Setup:

  1. Proxy Setup:

    • Install and configure the proxy.
    • Add routers to be monitored.
  2. Data Collection:

    • Once configuration is complete, it will take approximately 3 to 5 minutes for the proxy to gather data from routers.
    • Data will be pushed to the cloud server and accessed by the Ceburu portal for UI rendering.
  3. View Monitoring Data:

    • Upon successful data collection, monitoring data will be accessible under: AI Monitoring → Operational Analysis → Catalyst.

Supported Protocols:

  • Supports SNMP versions v1/v2 (community string) and v3 (username/password) for router configuration.

Troubleshooting:

  • If installation fails, detailed logs are available under Downloads → Reports → AIOps Proxy Log.



Ceburu On-Cloud Installation:


Once your account is set up, configure asset management settings before proceeding  with the installation by clicking the link:  Manage Network Groups


To finalize the installation, run the following two executable files: 


  1. Ceburu Infrastructure 
  2. Ceburu Application.


 

1. Ceburu Infrstructure Setup:


Download Installer Files:


            Login to Ceburu Portal   (portal.ceburu.com) > Downloads



 

 

Welcome Page 

 




Select directory where you want to install


 

 

 

 

Enter Credentials

           

Please enter your Ceburu username, password, and license key.


 

 


Validating the Credentials

 

 



Checking Dependencies


Verifying all the dependencies required for installing Ceburu.

 



Select the modules to be installed


 


Installing the environment


 

 


                    Infrastructure Installation Completed:


  

Infrastructure installation completed successfully. Once done, proceed to run the Application installer.



 


Finish Infrastructure Page:






2. Ceburu Application Installation:


Download the Ceburu Application



 


Welcome Page


 

 

Enter Credentials


Please enter your Ceburu username, password, and license key.


           

 

Checking Dependencies


Verifying all the dependencies required for installing Ceburu.

 

 


Select the modules to be installed


 


 


Enter Domain Credentials


Enter your network domain credentials. If you choose "Save and Continue," your credentials will be stored in the Ceburu database for future use. Otherwise, they will not be saved.
            

 

 


Installation Started

 



Installing Scanner, Proxy and Agent


 



Installing DBKPI Monitoring Agent




Installing Backup Manager


 


Installing Remote Connect




Installing Patch Manager


 


Installing Application Manager:





Preparing files for distribution to all node machines


 


Installation Completed all our services are in running state



Probe machine setup completed


The probe machine setup is now complete. If you wish to proceed with installing agents on all endpoints, select "Scan and Install Agents on All Devices." Otherwise, you may quit the installer.



 


Scanning In progress:


 

These are devices are scanned by scanner


 


Installing all Endpoints




Status of all Endpoints


 



Finish Page:




Endpoint Installation Using ADDS:


To install Active Directory Domain Services (ADDS), select the checkbox labeled "Endpoint Installation Using ADDS."



 

 

          

Next, you will be prompted to enter the domain name on the following page.

Example: see.local


 


When you choose "Endpoint Installation Using ADDS," it automatically creates a Group Policy Object (GPO) for the specified domain name.


 



After setting up the Probe, it will create a Group Policy Object (GPO) for the domain and then close the installer. The installer will not proceed to the broadcasting process, as the GPO will handle all necessary configurations.

 

 

Note: GPO will take a minimum one and half hours to two hours.

 


Once the installation is complete, the monitoring of devices is automatically initiated.


Note:  The process may take a few minutes. 



Microsoft Windows Defender Exclusion  

Note: This is exclusively for Microsoft downloads.




    

Follow the steps shown above to bypass any potential interruptions for the Ceburu download process from Microsoft Defender.







Was this article helpful?

That’s Great!

Thank you for your feedback

Sorry! We couldn't be helpful

Thank you for your feedback

Let us know how can we improve this article!

Select at least one of the reasons
CAPTCHA verification is required.

Feedback sent

We appreciate your effort and will try to fix the article