Upgrading Deployed Capabilities on Azure

When the the CDF infrastructure upgrade is complete, you can upgrade your deployed capabilities, such as Transformation Hub, Recon, Intelligence, or other ArcSight Platform products that run on the CDF. This process will also deploy Fusion, which is required for ArcSight Platform 22.1.2 and later. (If you have already deployed Fusion, then this process upgrades it.)

• Accepting the Browser Security Certificate

• Upgrading Deployed Capabilities on Azure

• Upgrading Deployed Capabilities

Accepting the Browser Security Certificate

Before starting the upgrade process, you must accept the browser security certificate, which will authorize your browser to access the CDF management portal and perform the upgrade.

1. Log in to the CDF Management Portal.
2. Click DEPLOYMENT > Deployments.
3. Click ... (browse), then select Reconfigure.
4. Accept the browser certificate.

Considerations for Upgrading Intelligence

If you have deployed Intelligence and are upgrading it, consider the performing the following steps on the NFS before upgrading the deployed capability:

• Ensure that you move your SQL loader scripts from:
  /<arcsight_nfs_vol_path>/interset/analytics/vertica_loader_sql/0/<existing_folder_name> to
  /<arcsight_nfs_vol_path>/interset/analytics/vertica_loader_sql/0/1.<existing_folder_name>.
  

• If you are using custom data identifiers, ensure that you back up the logstash-config-pipeline config map that is accessible through the Kubernetes dashboard.

Upgrading Deployed Capabilities

Before upgrading the deployed capabilities, confirm that any existing suite-upgrade-pod-installer deployment has been deleted by using the following command:

kubectl delete deployment suite-upgrade-pod-arcsight-installer -n `kubectl get namespaces | grep arcsight-installer | awk ' {print $1} '`

The command will return an error if no upgrade has been performed previously.

To upgrade your deployed capabilities:

1. Upload your metadata and product images to the ACR.
2. From the jump host, browse to the CDF management portal at https://<virtual_FQDN>:5443.
   1. Click DEPLOYMENT > Metadata and click + Add.
   2. Browse to and select the metadata file arcsight-installer-metadata-x.x.x.x.tar. This process adds the new metadata to the system.
3. Start the upgrade process.
   1. Click DEPLOYMENT > Deployments. In the Update column, find the numeral 1 inside the red circle.
   Minor version changes do not display in the same way as regular updates. (For example: 22.1.0.15 -> 22.1.0.16.)
   2. Click the red circle, then select your recently-added metadata to initiate the upgrade.
4. From the Update to page, click NEXT until you reach the Import suite images page.
When prompted to download or transfer images, you can click NEXT to skip the steps, since you performed these steps earlier.
5. Ensure that the validation results of container images show a complete number of files.
On the Import suite images page, the process will already display your image files, as you performed these steps earlier.

6. (Conditional) If you’ve deployed Transformation Hub, perform the following action:

   On the Transformation Hub tab, select whether you want to enable the generation of verification events for parsed field integrity checks used by Recon. If enabled, set the verification event size accordingly (default value is recommended).

   For more information about how the Event Integrity feature works, see Stream Processor Groups.

   When enabling the generation of verification events for parsed field integrity checks feature, consider the guidelines in Adjusting the Partition Count for New Kafka Topics.
   
7. Click NEXT until you reach the Upgrade Complete page.