Cluster Administration Introduction

DataBee is a cloud-native security and compliance data fabric that ingests data from multiple disparate feeds, then aggregates, compresses, standardizes, enriches, correlates, and normalizes before transferring a full time-series dataset to your data lake of choice. DataBee’s data fabric is a glue between disparate tools enabling end users to extract more value from their data. DataBee brings together and enriches security and other enterprise data for a complete picture. DataBee supports continuous compliance, SIEM de-coupling, simple & advanced threat hunting, and behavioral baselines with anomaly detection.

DataBee is a powerful data integration platform that enables users to extract data from various sources, transform it into the desired format, load it into a target system, and visualize the data using business intelligence (BI) tools. With the help of DataBee, you can efficiently manage and manipulate large amounts of data to gain insights and make informed decisions.

The DataBee Cluster Administration Application multitenancy feature allows you to protect multiple tenants on one cluster. This document describes how to administer the DataBee cluster and manage tenants. You must have Cluster Administrator privileges to perform these functions. Cluster Analysts may view data of other tenants, but are restricted from changing configuration.

In this section, we will guide you through the process of navigating through the DataBee Cluster Management interface. We will cover the basics of accessing the cluster interface, understanding it, and using the various tools and features available. By following these instructions, you will be able to efficiently navigate through the interface and perform your tasks with ease.

Navigating the Cluster Application

In this section, we will guide you through the process of navigating through the DataBee Cluster Management interface. We will cover the basics of accessing the cluster interface, understanding it, and using the various tools and features available. By following these instructions, you will be able to efficiently navigate through the interface and perform your tasks with ease.

Login

To operate or configure DataBee at a cluster level, you will first need to log in with your account credentials. Your username is associated with a security role, which grants you the privileges for that role. If you have privileges to configure the cluster, you will be logged into the DataBee Cluster Administration Application.

Procedure: Log into the DataBee Cluster Administration Application

Follow these steps to log into the DataBee Cluster Administration Application.

1. From a browser, navigate to the URL of your DataBee platform. The Log In Screen appears.

2. Enter your login information. The default screen appears.

Tenants

Tenant management is a crucial part of managing a portal that provides services or resources to multiple users or organizations. To learn more about how to create, edit, and log in to a tenant account in DataBee, please refer to the Tenant Management section of our documentation.

Documentation

To access the cluster administration manual of Databee Cluster Management interface, in the HTML and PDF formats, navigate to the top right corner of the portal and click on the ? button. A drop-down menu will appear with the following options:

Online Cluster Administration Manual: This resource is a comprehensive guide to using the DataBee cluster management interface, with detailed instructions and explanations of all its features and functionality.

Cluster Administration Manual PDF: This resource is a downloadable PDF version of the online Cluster Administration manual, which you can save and access offline.

Select the resource that meets your needs, and you’ll be directed to the appropriate page where you can access the information you need.

Configuration

The configuration section of this user manual is a critical resource that includes a range of settings and options that allow organizations to tailor the product to their specific needs including instructions on how to manage user access ensuring the security and confidentiality of sensitive information.

System

The system configurations section contains detailed steps on configuring the audit logging and branding settings. For more information on how to customize the output stream of API logs for audit purposes, refer to the audit logging section. For more details on customizing the portal’s brand identity, refer to branding.

Access Management

The access management section consists of the Single Sign-On (SSO) and the Users subsections. Refer to the Single Sign-On (SSO) section for more details on configuring SSO connections.  The Users section provides information on managing the local user account access, role-based access controls, the roles supported in the DataBee Cluster account, and their permissions.

Notifications

Look for the bell icon located at the top right corner of the portal. It is used to alert you of any new notifications. Click on the icon to display a dropdown menu with your recent notifications. To view all your notifications, click on the See All button at the bottom of the dropdown menu. Notifications may include alerts, messages, or other important information related to your account.

The notifications are displayed in a table with a title, notification message, and the updated and created date of the particular message. Click on the All button to view all the notifications that you have received. You can click on the Unread button to display only those notifications that you have not viewed. The Search option helps you filter out and search for a particular notification. Under the ACTIONS column, you can click on the Delete button if you wish to delete a particular notification.

Make sure to check your notifications regularly to stay informed about any updates or changes.

Account

Locate the user icon at the top right corner of the portal and click on it to display a dropdown menu. The dropdown menu will consist of two buttons: My Profile and Logout.

My Profile

Click on the My Profile button to view your personal profile information. You can also access your API key, change your password, and set up your system and theme preferences from this page.

Under the 'Profile' section, you can view your account profile details, such as your first name, last name, username, and email. You can change your account password by clicking on the Change Password button. The Change Account Password dialog box appears, where you can enter your current password and new password. Confirm your new password by typing it again in the 'Confirm Password' field. Click on the Change Password button to save your new password. Under the API Key section, you can click on the Show Token button to reveal your API key. Click on the Copy to clipboard button to copy your API key to your clipboard. Your API key is a sensitive piece of information that should be kept confidential. Do not share your API key with anyone who should not have access to it.

System Preferences

To specify your preferences, click on the System Preferences button. This will allow you to customize your general settings, user interface, and home page layout to best fit your needs and improve your overall experience with the portal.

Under the 'General' section, you can specify the date format such as 'MMMM Do YYYY h:mm a', choose your timezone from the dropdown list, and enter the idle logout time in seconds. Under the 'User Interface' section, you can set the default number of results to display per page on tables.

Theme Preferences

To specify your preferred theme mode, click on the Theme Preferences button. You can choose between the light or dark theme by using the toggle button.

Entitlements

To modify entitlements for a specific tenant, click Details under the 'ACTIONS' column. 

Scroll to the bottom of the "Tenant Details" page to locate the 'Entitlements' section. Adjust entitlement settings by checking or unchecking the respective boxes. Asset Hygiene encompasses correlator, entity management, entity views, and owner discovery. The Cyber category includes Sigma detections, Rules management, and Security UI pages.

Entitlements to Features

Refer to the "Entitlements to Features" table for a clearer overview of the permissions associated with each feature.

	DataBee Core Platform	CCM	Security Hygiene	Security Threats
Pricing increases with Data Volume (1TB, 5TB, etc)
Unlimited Supported Feeds
up to 30 Feeds
up to 12 Business Dashboards - CCM, PCI
Entity Resolution
Active Detection Streams

Logout

After a period of inactivity, you will be logged out automatically. You can also log out manually at any time.

Procedure: Log out of DataBee Cluster Administration Application

Follow these steps to log out of DataBee Cluster Administration Application.

1. Select the user icon at the top of the screen.
2. Select Logout.