Preparing a high availability DBMS cluster for working with Kaspersky Security Center Linux

IKaspersky Security Center Linux supports Platform V Pangolin and Postgres Pro Built-in High Availability clusters.

A minimum high availability DBMS cluster configuration must include at least three nodes:

To prepare a high availability DBMS cluster for working with Kaspersky Security Center Linux:

  1. Modify the configuration file /etc/pangolin-manager/postgres.yml (if you use Platform V Pangolin) or /etc/postgresql//main/postgresql.conf (if you use Postgres Pro Built-in High Availability cluster) on all high availability DBMS cluster nodes as follows:
    • Add the following line to the postgresql section, if you will specify only the DNS name or IP address of the master node, or the replica node when connecting the cluster to Kaspersky Security Center Linux:

      log_hostname: '1'

    • Change the following parameter value in the postgresql section:

      search_path: ext,public

    For other configuration file parameters, you can use the recommended parameter values for PostgreSQL and Postgres Pro.

  2. After editing the configuration file, restart the DBMS cluster service on all high availability DBMS cluster nodes (excluding the arbiter node) as follows:

    systemctl restart pangolin-manager.service

    or

    systemctl restart postgresql-<version>

The database user must have the pg_read_all_stats privilege. You can grant this privilege by running the following command:

GRANT pg_read_all_stats TO "%1";

Where %1 is the name of the database user.

The user name is specified during the Administration Server installation in the KLSRV_UNATT_DBMS_LOGIN parameter.

The high availability DBMS cluster is ready for working with Kaspersky Security Center Linux. To connect the cluster to Kaspersky Security Center Linux, enter the DNS names, or IP addresses and ports of all cluster nodes during the installation of Kaspersky Security Center Linux at the step of specifying the DBMS address. Alternatively, you can specify only the DNS name or IP address of the master node, or the replica node when specifying the DBMS address.

Page top