Arctera Enterprise Vault™ eDiscovery Installation Guide

To install the Enhanced Auditing feature

1. Copy the MSI file of the Enhanced Auditing feature on the server you want to use as an audit server.
2. Run the MSI file from the Command Prompt to launch the Arctera Enhanced Auditing installer. The installer opens the Welcome wizard.

   Note:

   Click Cancel if you want to cancel the installation at any stage. After you click Cancel, the application prompts you to confirm the operation. If you interrupt the installation process, the installer prompts you to run the installation again whenever required. Click Yes to complete the operation and click Finish to abort the installation. Click No to continue the installation.

3. Click Next on the Welcome screen.
4. On the Prerequisites screen, see if you meet the listed prerequisites. If yes, select the I have read and met the above prerequisites check box and then click Next.
5. On the Prerequisite Status screen, the installer performs a check for all required software. When the prerequisite check is completed, click Next.
6. On the End-User License Agreement screen, read the Arctera Software License Agreement. If you agree to the terms, select the I accept the terms in the License Agreement check box and then click Next.
7. On the Installation location screen, the default installation location is displayed. If you want to use a different installation location, click Browse to select the installation location.
8. On the Auditing Service Account Login screen, provide the following account details for the Auditing Service.

   • Domain

   • Username

   • Password

9. On the Arctera Enhanced Auditing Configuration Welcome screen, provide the following required details for creating the Audit Server URL and enabling it for secure access.

   • Server Name: DNS Alias name or FQDN for the audit server.

   • Port: Port for the audit server site. Enter a port that is available to use. You must not use the default IIS port 80.

   • Comma-separated list of IP addresses from where the audit server can be accessed: Enter a comma-separated list of IP addresses of the servers from which the audit server will be accessed. These are the IP addresses for each protocol (IPv4 and IPv6) that are enabled on the eDiscovery server.

   • Holding folder Path: A directory where the audit data will be stored temporarily.

     Note:

     Ensure that the Access Control List (ACL) of the Holding Folder is not changed.

   Based on these details, the audit server URL format becomes: https://<auditservername>:<portnumber>.

   Click Next after entering all required details.

10. On the Arctera Enhanced Auditing Configuration Settings screen, enter details of either an existing Elasticsearch server or a new Elasticsearch server.

    For an existing Elasticsearch server, select the Use an existing Elasticsearch server details, and then provide the following details:

    • Elasticsearch URL: URL of the Elasticsearch server.

      Note:

      Ensure that security is enabled with native realm.

      If Elasticsearch has TLS enabled, then ensure that the required configurations also exist on the audit server. For more information on security in Elasticsearch, refer to the Elasticsearch documentation.

    • Elasticsearch Username: Username of the Elasticsearch superuser. This superuser is displayed at the time of upgrading and modifying the Enhanced Auditing feature. The Enhanced Auditing feature uses this superuser to perform the user and role management operations on Elasticsearch.

    • Elasticsearch Password: Password of the Elasticsearch superuser.

    To install a new Elasticsearch server, enter the password in the Set password for Elasticsearch built-in users field. When prompted, specify the Elasticsearch installation location where you want to install Elasticsearch.

    Click Next after entering all required details.

11. Click Install to proceed with the installation.
12. On the final screen of the setup, the Audit Server URL is displayed. You need this URL while configuring the Auditing settings in the Configuration > Settings tab in the eDiscovery client.
13. To view the installation-specific logs, navigate to the folder where you have installed the Arctera Enhanced Auditing setup and access the Logs folder.