Integrating Windows Server Collector

This setup is for the XDR Collector only. If you're an existing customer with a legacy server older than 2016, refer to Integrating Windows Server/NXLog.

If you have the BX500 device, this procedure isn’t required.

To integrate Windows Server Collector, follow the procedures below:

To enable the collector for Windows Server
To install the XDR Collector for Windows Server

Enabling the XDR Collector for Windows Server

To enable the collector for Windows Server

In Barracuda XDR Dashboard, click Administration > Integrations.
On the Windows Server Integration card, click Setup.
Select Enabled.
Click Save.

Setting Up the XDR Collector for Windows Server

The XDR Collector runs as a service in your environment. While the minimum specifications are listed below, the required resources depend on the number of active integrations and the amount of data being processed.

Minimum Requirements

To set up the XDR Collector, the minimum requirements are the following:

Minimum requirements

Minimum requirements
CPU	2vCPU
Disk Size	10GB SSD
Memory	1GB

Operating System

Windows Server 2016 and higher

Windows Server 2022 is recommended.

Required Endpoint/Port Communication

The XDR Collector must be able to communicate to the following endpoints/ports:

Logstash	a96190b49bd294a5fbb3725ff20aab78-c7f64fe7557a87d2.elb.us-east-1.amazonaws.com:5044 elastic-agent-on-prem.ingest.skoutsecure.com:5044
Management Server	b5e9a5096e0a4f7782cc444c8edbbd5e.fleet.us-east-1.aws.found.io:443
Update Server	artifacts.elastic.co:443

Before you install the XDR Collector on Windows Servers, you must enable Advanced Policy Logging see Setting Up Advanced Policy Logging.

To install the XDR Collector for Windows Server

Install the XDR collector on each server you want to monitor.

The install command is unique for each account and should only be run on systems within that account's network.

In Barracuda XDR Dashboard, click Infrastructure > Collectors.
In the Policies table, next to On-Prem, click Action > Install.
Click Windows.
Copy the install command at the bottom of the dialog box.
On the server you want to monitor, run Powershell as an administrator, paste the install command, and run it.

It may take up to 30 minutes for the install to complete.