CeburuAI Installation and Configuration

Ceburu Log Management – Probe Installation and Setup

Ceburu supports both WinRM and non-WinRM configurations for log management.
This flexibility allows seamless integration in varied environments and supports multi-probe (dual probe) architectures for redundancy and scalability.

System Requirements:

• Windows Server 2019, 2022, or later

Network and Firewall Requirements:

Outbound HTTPS traffic TCP 443 must be allowed to the following endpoints based on the selected region.

US Region

• us-portal.ceburuai.com

• ingest.ceburuai.com

EU Region

• eu-portal.ceburuai.com

• ingest.ceburuai.com

• WinRM is enabled on Forwarder, and Collector systems (for WinRM-based setup).

• Network connectivity is available between these components.

• Administrator privileges are available on the installation machine.

1. Go to https://portal.ceburu.com/ and log in
2. On the left-hand menu, scroll down and click More Features

3. You will be redirected to  https://portal.ceburuai.com where the Log Management module will open.

4. From the top right corner, click on the Region Selector and select the appropriate region where the probe will be deployed. Ensure the correct region is selected before proceeding, as the probe will be registered and associated with this region.

5. Click on the Download icon located in the dashboard.

6. Download and install the Ceburu Probe on the designated probe machine by following the on-screen installation instructions.

Note: Ensure the probe machine meets the minimum system requirements and has internet access for successful installation.

After downloading the installer, follow these steps:

Locate the Installer: Go to your Downloads folder and double-click the CeburuProbeInstaller.exe file.

Accept the License Agreement: Review the license terms and click I Agree to continue.

Configure Settings: Enter any required configuration details, such as the Portal URL or Authentication Key provided in the portal.

Provide the Probe Listening Port and click Install.

Complete the Installation: Click Install to begin the installation process. Once complete, click Finish to exit the setup.

Verify Installation: After installation, the probe service should start automatically. You can verify this in the Services panel by checking for Ceburu Probe Service status.

After installation:

1. Navigate to Configurations → Network Discovery in the Ceburu Portal.

2. You will see the registered probes listed under Registered Probes:

   • Primary Probe - Main discovery node responsible for initiating network scans and device communication.

   • Secondary Probe - Optional backup or extended discovery node used for redundancy or distributed scanning.

3. Both probes should display a Connected status once communication is successfully established.

 Note: Adding a Secondary Probe is optional. It can be used to improve coverage or provide failover capabilities but is not mandatory for the setup to function.

If the Primary Probe (and optional Secondary Probe, if configured) is connected, the setup is complete.

 Viewing Discovered Devices

• After a successful scan, click the eye icon next to the scan profile to view the discovered devices.

To add the devices to your managed inventory, select the desired devices and click Add to Assets.

Once added, devices will appear under Configurations → Assets. 

Setting Device Credentials

Before deploying the End Agents, credentials must be set for the target devices:

1. In the Assets tab, select the devices you want to configure.

2. Click the Key icon or select Set Credentials from the top-right dropdown.

3. Enter:

   • Domain

   • Username

   • Password and Confirm Password

4. Click Set Credentials to apply the credentials to the selected devices.

Once devices are added under Assets and credentials are configured, you can install the Ceburu End Agent to enable endpoint log collection and monitoring.
 Ceburu supports installation with WinRM enabled as well as without WinRM, offering flexibility for different network environments. 

Installing End Agent

If WinRM is enabled, deploying the End Agent is optional, as data can be collected directly through WinRM.
However, if WinRM is not supported or disabled, you can install the Ceburu End Agent manually to enable communication between the endpoint and the Ceburu Probe.

1. Installing with WinRM Enabled

1. Go to Configurations → Assets in the Ceburu Portal.

2. Select the devices where you want to install the End Agent.

3. Click the dropdown menu (top-right corner) and choose Install Agent for bulk action or click download icon in the table to install agent.

4. The installation will automatically begin on the selected devices through WinRM communication.

5. Once the installation completes successfully, the End Agent Status will update to Active.

Note: WinRM must be enabled on the devices and accessible from the Ceburu Probe for the agent to deploy remotely.

2. Installing without WinRM Enabled

If WinRM is not enabled in your environment, you can perform a manual installation using the downloadable installer.

1. Go to Configurations → Downloader.

2. Under Available Files, select Ceburu Agent Installer.

3. Click Download to obtain the setup file
   

4. Run the installer (Ceburu-Agent-Setup.exe) on the target device.

5. The Ceburu-AI Agent Setup wizard will open.

6. Click Next to begin the setup

Accept the License Agreement

1. Read through the Ceburu Software License Agreement.

2. Click I Agree to continue the installation process.

In this step, you’ll provide connection parameters for the agent to communicate with the probe.

• Probe IP: Enter the IP address of the registered Ceburu Probe (for example: 192.168.33.174).

• Probe Port: Enter the listening port configured during the probe setup (default: 808).

• API Key: Paste the Agent Token from the Downloader page in the Ceburu Portal. Make sure the token is correct with respect to the region.

After filling in the details, click Install to begin the deployment.

• The installer will extract and copy the required files to your system directory.

• Wait until the progress bar completes.

• When installation finishes, click Finish to close the wizard.

After installation:

1. Go to the Ceburu Portal → Configurations → Assets.

2. The installed device will automatically appear in the Assets list.

3. The End Agent Status will update to Active once communication with the probe is established.

For Log Management Installation & Configuration follow the below link:

Log Management Installation & Configuration