Validate PEG is running
- Updated: 2023/09/01
Verify whether your PEG configuration is operating correctly in review mode.
Prerequisites
URL format | Purpose |
---|---|
analytics-fiq-<UID>.<apex domain> | Provides access to Kibana dashboards where we can monitor the number of logs, number of users, what is being forwarded, and so on. |
dlp-fiq-<UID>.<apex domain> | Is a critical URL as this is where the sensor sends all its logs to. This URL must be used as an input while setting up the sensor. |
es-fiq-<UID>.<apex domain> | Used for accessing database directly. This is very important as the key light application accesses database to align meta data with the images. |
klite-fiq-<UID>.<apex domain> | Provides access to the Klite application where the raw data and the corresponding screen shots can be visualized. |
proxy-fiq-<UID>.<apex domain> | Monitors the health of Kubernetes services. Note: This is only required for debugging. |
st-fiq-<UID>.<apex domain> | Provides a direct link to the OCR service. Note: This is only required for debugging. |
storage-fiq-<UID>.<apex domain> | Provides Direct Access to the image storing application. Note: Images are in raw S3 bucket format that can be
accessed through Klite. |
Procedure
-
In a browser, go to
https://storage-fiq-<UID>.<apex domain>
.You will see a screen like this: ("Access Key" = "your username" and secret key = "your password") -
Log in to
https://storage-fiq-<UID>.<apex domain>
using a user you created in the configuration steps previously (by running ~/peg/scripts/add-storage-user.rb on the VM). -
After you log in, you will see these folders on the left. If you do not, run
the "Storage Management" "initialize storage" steps in the configuration steps.
If you still do not see them after that, contact Process Discovery.
-
In a browser, go to the analytics URL:
https://analytics-fiq-<UID>.<apex domain>
You will see a screen similar to the following:
If you do, go to the next step.
-
In a browser, go to
https://dlp-fiq-<UID>.<apex domain>
.You will just see a blank page. If you encounter an error or it times out, then there is something wrong. - Install the Process Discovery Sensor on a Windows machine. Open a web page, such as https://www.fortressiq.com and then click the page several times.
-
After 10 minutes (which is the approximate duration for review images to be
generated), log in to
https://storage-fiq-<UID>.<apex domain>
. Log in with one of the storage users that you created previously in the configuration steps.Note on the folders on the left side:- fiq-screenshots: Shows the screenshot that PEG received
- forwarded: Shows what the screenshot looks like if it is forwarded. This is populated regardless of whether it was actually forwarded or not.
- review: PEG adds annotation to the images here to show more clearly what will be redacted. PEG includes a blue rectangle around where the redacted word previously existed and includes the text it found above the rectangle.
- Click the fiq-screenshots folder on the left.
- Download some of the images from this folder and confirm that they look like the results of your test.
- Click on the review folder.
-
Download some of the images from this folder and confirm that they appear to be
from your test. If PEG finds words that must be redacted, PEG includes a blue
rectangle around where the redacted word existed and it includes the text it
found above the rectangle, as follows.
If this looks as expected, you have validated that PEG is working in review mode.