Managing the cluster

You can view the table of cluster servers, add servers to the cluster, decommission servers, and enable or disable the cluster. if necessary, you can increase the disk space on the storage server.

Viewing the table of servers of the cluster

The table of cluster servers is displayed in the Cluster section of the application web interface.

The table contains the following information:

• Server type—server type depending on its role in the cluster.

  The following values can be displayed:

  • Storage.
  • Processing.
• Status—server status.

  The following values can be displayed:

  • Connected.
  • Not connected.
• Host name—server name.
• IP— IP address of the server.
• RAM—RAM load level of the server.
• CPU—CPU load level of the server.
• Action—Actions that you can perform with the server.

  The following action is available: Delete.

Adding a server to a cluster

To add a server to the cluster, you need to start the installation of Kaspersky Anti Targeted Attack Platform on this server and follow the steps to install the components. The added server is displayed in the cluster server list.

Increasing the disk space on the storage server

You can increase the disk space on an operational storage server by installing an additional disk.

To increase the disk space of the storage server by means of an additional disk, you need to contact Technical Support.

The server is configured in Technical Support Mode.

Decommissioning servers

To decommission an operational server, you need to contact Technical Support.

If a server fails, you can decommission it on your own.

To decommission an inoperable processing server:

1. Add a new processing server to the cluster.
2. Remove the server from the cluster.
3. Configure the sizing of the application for the new configuration.

The processing server will be decommissioned.

To decommission an inoperable storage server:

1. Add a new storage server to the cluster.
2. Contact Technical Support to remove the inoperable server from the cluster.

The storage server will be decommissioned.

Removing a server from a cluster

If you are using the

distributed solution

Two-level hierarchy of servers with Central Node components installed. This hierarchy allocates a primary control server (Primary Central Node (PCN)) and secondary servers (Secondary Central Nodes (SCN)).

multitenancy

Operation mode in which Kaspersky Anti Targeted Attack Platform is used to protect the infrastructure of multiple organizations or branch offices of the same organization simultaneously.

A removed server cannot be restored. Make sure that the selected server is not operational.

To remove a server from the cluster:

1. In the window of the application web interface, select the Cluster section.
2. In the Action column, click the Delete link opposite the server that you want to remove.
3. Click Proceed.

The removal process will start. Removal may take about a day. Information about the removed server will not be displayed in the table of servers.

After removing the server, you can reconfigure the servers in the cluster or add a server with the same role to maintain the same level of application performance.

Starting up and shutting down the cluster

To shut down or start the cluster, we recommend contacting Technical Support. Do not shut down or start the cluster if you encounter problems with application health.

If you want to power off the healthy servers in the cluster, you must first shut down the cluster to avoid data loss.

To shut down a cluster:

1. In the application web interface, go to the Cluster section.
2. Click the Shut down button.

The main components of the application are stopped. You can now power off the cluster servers.

To start up the cluster servers:

1. Disconnect power to the servers if it has not been previously disconnected.
2. Power on the storage server.
3. Power up the remaining servers.

The cluster servers will start up.

It takes approximately 90 minutes for all servers in the cluster to start up. The application web interface becomes available before all cluster servers are started. However, for users with the Senior security officer, Security officer, Security auditor roles, the application web interface does not display the application menu, and users with the Administrator can manage only the Server configuration section.

We strongly discourage managing the sizing settings of the application until all the servers in the cluster are up and running.

When all of the servers in the cluster are up and running, the application web interface menu is displayed normally.