Kaspersky Machine Learning for Anomaly Detection

First startup of Kaspersky MLAD

This section describes the sequence of application configuration steps that must be performed by the system administrator when Kaspersky MLAD is started for the first time.

The first startup of Kaspersky MLAD consists of the following steps:

  1. Starting Kaspersky MLAD

    Start Kaspersky MLAD. The following Kaspersky MLAD prerequisite services will run automatically:

    • API Server
    • Web Server
    • Message Broker
    • Keeper
    • Time Series Database
    • Database
    • Logger
    • Docker API Server
    • Migrations
    • Push server
  2. Connecting to the Kaspersky MLAD web interface

    Open the application web interface in a supported browser and enter the user name and password of the first Kaspersky MLAD user with the system administrator role defined during installation of the application. Change the password for your user account. For a secure connection to the Kaspersky MLAD web interface, you are advised to install a trusted certificate.

    In the System parameters section, in the administrator menu, specify the name of the monitored asset.

  3. Uploading a configuration of tags and assets of the hierarchical structure to Kaspersky MLAD

    For subsequent operation, upload tag and asset configuration to Kaspersky MLAD. Tag and asset configuration is described in a XLSX file. For an example of a tag and asset description, see the Appendix.

  4. Configuring connectors

    To work with data, configure the connectors used at your monitored asset. You can configure the following connectors:

  5. Configuring services

    In the System parameters section of the administrator menu, configure the services that you need to use for your monitored asset. In the Services section, check the statuses of the services and start them, if necessary. For example, the necessary connectors must be running to receive data, and the Anomaly Detector service must be running to correctly detect anomalies.

  6. Connecting to a data source

    When the connectors are configured, start the connectors used for your monitored asset. Go to the Dashboard section and make sure that data is being received by Kaspersky MLAD in online mode.

  7. Creating user accounts

    Create accounts for users of the application and assign the necessary roles to them. Create incident notifications for users.

Kaspersky Machine Learning for Anomaly Detection is prepared for operation, and the application is receiving and processing data.

Users can start working with Kaspersky MLAD using the web interface.