Choosing Your Installation Method

You can install ArcSight products using one of the two methods below.

• Using the ArcSight Platform Installer (On-premises Only)

• Deploying a Manual Installation (On-premises or Cloud)

Using the ArcSight Platform Installer (On-premises Only)

ArcSight Platform Installer significantly simplifies the installation and deployment experience using automation. The installer has a prerequisites checker that verifies the OS, storage, network, and other settings are appropriate for the desired deployment. You can have the Installer tool adjust the prerequisite settings to ensure a successful deployment.

It is also capable of deploying containerized and database infrastructures in a simple, all-in-one node or in a highly-available multi-node configuration. It requires a minimum set of deployment configuration settings to describe the capabilities to deploy; master, worker, and database node host names; and login IDs and passwords. You can run the tool with this deployment configuration on a single node and it will automatically connect to all the nodes specified in the configuration in order to run the capabilities.

The download package includes a set of example deployment configurations , such as a highly-available deployment configuration of Recon.

Consider the following when deciding if the Platform Installer is a good fit to use in your environment:

• ArcSight Platform Installer has not been tested on a dual-homed network (dual or redundant connections to a single Internet Service Provider), so be careful before using it in this scenario.

• ArcSight Platform Installer is only capable of installing to an on-premise environment.

• ArcSight Platform Installer disables the option to authorize the collection suite usage data.

• Passwordless SSH access will automatically be configured between the master node, where ArcSight Platform Installer is used and all other CDF and Database nodes, so ArcSight Platform Installer can automatically perform tasks on the nodes securely without requiring passwords to be retained.
• The ArcSight Platform Installer assumes that yum is already installed and configured on every node. The pre-check fails if it is not.
• The ArcSight Platform Installer is capable of installing using the root user only, not sudo mode.
• If ArcSight Platform Installer is not a good fit for your environment, you can perform the installation manually.
• ArcSight Platform Installer will automatically create a dbadmin account on ArcSight DB hosts, which will have a conflict if those hosts have NIS/LDAP account management enabled on them. In such cases, disable NIS/LDAP on the ArcSight DB hosts if you wish to use the ArcSight Platform Installer. If you cannot disable NIS/LDAP on the ArcSight DB hosts, instead of using the ArcSight Platform Installer, perform the manual installation procedure.

Deploying a Manual Installation (On-premises or Cloud)

If you need to deploy to a cloud provider, such as Azure or AWS, or if ArcSight Platform Installer does not meet your needs, you can use a manual installation.

• On-premises (Ensure you prepare your environment before using this manual installation method.)
• Cloud deployment