-
Stop LogRhythm Services. Leaving them running will result in miscommunication, error logs, and diagnostic alarms.
-
If you have a stand-alone AI Engine on a distributed system, complete the following steps. Otherwise, skip to step 3.
-
Use standard Windows procedures to change the IP address of the system.
-
Ensure your DNS service reflects the change.
-
Open the LogRhythm Client Console.
-
On the main toolbar, click Deployment Manager.
-
Click the Entities tab.
-
To open the properties page, double-click the AI Engine host.
-
Click the Identifiers tab.
-
In the Identifiers field, select the old IP address and click Delete.
-
In the IP Address field, enter the new IP address, click Add, and then click OK.
-
-
In the Client Console, click the AI Engine tab of the Deployment Manager.
-
In the lower-left corner, click Servers.
-
Double-click the active AI Engine.
-
Update the IP Address and then click OK.
-
In the lower-left corner, click Rules.
-
In the upper-right, click Restart AI Engine Servers.
-
Restart LogRhythm services with the Windows Services Console (services.msc) and the Data Indexer scripts in C:\Program Files\LogRhythm\Data Indexer\tools.