Mounting and Unmounting S3 Bucket

Prerequisite

Logpoint v7.1.0 or later

Install the Integration

1. Go to the Marketplace.

2. Find the Integration and download the .pak file.

3. Go to Settings >> System Settings from the navigation bar and click Applications.

4. Click Import.

5. Browse to the downloaded .pak file.

6. Click Upload.

Mounting an S3 bucket

1. Make an SSH connection to Logpoint as the li-admin user.

2. Enter the command s3fs-mount.

3. Enter the Access Key and Secret Key provided by AWS.

4. Enter the S3 bucket URL.

   1. For AWS S3 bucket users, the bucket URL must be https://s3.amazonaws.com. If the general bucket URL doesn’t work, use the region-specific URL in the https://s3.[region].amazonaws.com format.

   2. For IBM S3 bucket users, the value of the bucket URL must be the service provider’s public URL in the https://service-provider-url format.

5. Provide a source bucket name. You can also add sub-directories in the bucket_name>:/<name_of_directory> format.

6. Provide the local directory path to mount with the S3 bucket.

When you mount an S3 bucket to a directory, Logpoint automatically configures it as a repo directory. You can log in to the UI and configure it to use a repo path to send logs directly to an S3 bucket. Depending on your requirements, we recommend creating a mount point in the li-admin home directory or in/opt/immune/storage. You don’t need to add extra permissions to the mount point because the S3fs Tool sets the necessary permissions automatically during mounting. After mounting, the logs are stored in the RepoName->Year->Month->Day format.

Unmounting an S3 bucket

1. Make an SSH connection to Logpoint as the li-admin user.

2. Enter the command s3fs-umount <path to the mounted directory>.

Logpoint removes the connection to S3. Then access your data directly from the S3 portal or by remounting it in Logpoint.