Update the IP Address of a Data Processor
Changing the IP Address of the Data Processor Service with minimal service interruption requires more time and planning than doing so for other LogRhythm Services. Every System Monitor assigned to the Data Processor needs to be updated for it to continue functioning properly. Rather than manually updating every System Monitor Configuration Manger locally, LogRhythm has provided a mechanism to push the change to the System Monitors throughout the deployment.{
- 24 hours before you plan to change the IP address, update the SecondaryServerIP setting in the Data Processor Advanced Properties with the new IP. Changing this setting sends a secondary IP setting to all System Monitors bound to the Data Processor.
- After waiting 24 hours for the SecondaryServerIP setting to propagate to all System Monitors bound to the Data Processor, stop the LogRhythm Mediator Service using the Windows Services Console.
- If you have a stand-alone Data Processor on a distributed system, complete the following steps. Otherwise, skip to step 4.
- Use standard Windows procedures to change the IP address of the system.
- Ensure your DNS service reflects the change.
- Open the LogRhythm Client Console.
- On the main toolbar, click Deployment Manager.
- Click the Entities tab.
- To open the properties page, double-click the Data Processor host.
- Click the Identifiers tab.
- In the Identifiers field, select the old IP address and click Delete.
- In the IP Address field, enter the new IP address, click Add, and then click OK.
- In the Client Console, click the Data Processor tab of the Deployment Manager.
- Double-click the Data Processor.
- In the lower-left corner of the Properties dialog box, click Advanced.
- Remove the SecondaryServerIP value.
- Update the ServerIP value with the new Data Processor IP address.
- Restart the LogRhythm Mediator Service using the Windows Services Console (services.msc).
- In the Client Console, click Deployment Monitor on the main toolbar.
- Verify that System Monitors check in. They should start to show heartbeats shortly after the Mediator service is restored.