This article provides information about the Probe server in UTMStack, including its role, requirements for installation, and its crucial function in data collection and transmission for analysis.
Overview
The Probe server in UTMStack plays a crucial role in collecting data from dependencies or branch locations of an organization. It acts as a sensor by gathering data and forwarding it to the Master server, where the correlation engine performs detailed analysis. This Knowledge Base article provides essential information about the Probe server's requirements for installation and its significance in network monitoring and security analysis.
Installation Requirements
To ensure effective installation and operation of the Probe server in UTMStack, it is recommended to meet the following minimum requirements:
- Disk Space: A minimum of 100 GB disk space is recommended for the system. This ensures ample storage capacity for the collected data.
- RAM: At least 8 GB of RAM is recommended for optimal performance. The amount of memory needed may vary depending on the volume of data being collected and the number of devices being monitored.
- CPU: It is advisable to have at least 4 CPU cores for the Probe server. Additional cores may be required depending on the data collection load and the number of devices being monitored.
By adhering to these minimum requirements, the Probe server can efficiently collect data from various sources and transmit it to the Master server for analysis in the correlation engine.
Functionality
The primary function of the Probe server in UTMStack is to collect data from remote dependencies or branch locations. Unlike the Master server, the Probe server does not perform analysis itself. Instead, it focuses solely on data collection, acting as a sensor.
Once the Probe server collects data, it forwards it to the Master server. The Master server hosts the correlation engine, which performs in-depth analysis, identifies patterns, and generates insights based on the collected data from the Probe server.
The Probe server acts as a bridge between remote locations and the centralized analysis performed by the Master server's correlation engine. This enables comprehensive network monitoring and security analysis across the organization.
In summary, the Probe server in UTMStack has the following key functions:
1. Data Collection: The Probe server collects data from dependencies or branch locations.
2. Data Transmission: It forwards the collected data to the Master server for analysis.
3. Sensor Function: The Probe server acts as a sensor rather than performing analysis itself.
4. Bridge for Analysis: It serves as a bridge between remote locations and the correlation engine on the Master server.
By meeting the recommended requirements and utilizing the Probe server effectively, organizations can ensure efficient data transmission and enable the Master server's correlation engine to perform advanced analysis, ultimately generating valuable insights.
