If you're having trouble at any stage please contact us at email@example.com.
Compatible with SkyFormation App Version
This guide is compatible with SkyFormation App version 2.1.21 (see Get Your SkyFormation App Version). If you are using an older version of SkyFormation we highly recommend to update to the latest one.
This guide explain how to use the new SkyFormation installation framework that was introduced from SkyFormation version 2.1.21. If you have copies of the old SkyFormation installation procedure make sure to delete it. Please use only the procedure described in here.
An installation which is part of an Exabeam OEM differ from a stand alone deployment in that the SkyFormation root directory is /opt/exabeam/data/sk4 rather than the default /opt/sk4 and all docker volumes are mapped to the root directory via the local driver options. Use -d=exabeam parameter to run the SkyFormation installer in an Exabeam OEM deployment mode.
- Complete the tasks detailed at:
SkyFormation Platform Prerequisites
- Make sure you have your SkyFormation license key
a. Running the installation
Have SSH into the SkyFormation dedicated Linux machine with a "sudo"er account
Use -d=exabeam parameter to run the SkyFormation update in an Exabeam OEM deployment mode.
command to use if you have no proxy
curl -L https://download.skyformation.net/v2/download/installer/edge/pre-install.sh > preinstall.sh && chmod +x preinstall.sh && sudo ./preinstall.sh -d=exabeam && rm preinstall.sh
command to use if you are running behind a proxy
curl -x https://proxyserver:8080 -L https://download.skyformation.net/v2/download/installer/edge/pre-install.sh > preinstall.sh && chmod +x preinstall.sh && sudo ./preinstall.sh -d=exabeam && rm preinstall.sh
b. Insert the following parameters when asked (in bold yellow below):
>> License key:
Insert your SkyFormation app license key provided by SkyFormation
>> Proxy server  :
Default is no proxy in use. Press enter if no proxy in use.
If you are running behind a proxy insert the proxy DNS and port (e.g. proxyserver:8080).
You should see the two lines (as in the above diagram):
>> Testing license key
>> License key is valid
>> Application port :
Port used by the SkyFormation web app. Enter for default 8443
Installation is completed successfully and SkyFormation app is running when you see the following output lines:
Starting the compose service...
Compose service is up
c. Verify that the SkyFormation web app is accessible
Open your Chrome browser and enter the SkyFormation webapp URL as followed:
You will see a screen asking you to approve the SkyFormation web app certificate in use
- Press on "ADVANCED" link and then in the expanded part on "Proceed to ..."
(see the screenshot above)
- Insert in the SkyFormation login screen the default user & password
(see the screenshot below)
Default User: sk4admin
Default Password: password
Leaving the default password is a security risk. Please change to a secure one using the link:
How to replace/rest the SkyFormation password
If you see the SkyFormation app 'License" page as seen below your SkyFormation app installation was completed successfully.
d. Activate your SkyFormation app license
- Review and accept the SkyFormation End User License Agreement (EULA) by pressing
(see the screenshot below)
- Put the SkyFormation app license key provided to you at the "License Key" text box
If the license is valid you will see "OK, The license is valid" as seen below
- Press "SAVE & CONTINUE"
e. Choose SINGLE-TENANT
SkyFormation app could run in either a "single-tenant" or "Multi-tenant" mode.
SkyFormation for Exabeam should run in the "single-tenant" mode which allows integration with
one SIEM (Exabeam SIEM/aa) as the target system to get the SkyFormation events at.
Each cloud connector added will automatically be attached to the single default tenant in this
mode making sure the entire cloud connectors events will be send to Exabeam machine.
- Press "SAVE & FINISH"
e. Integrate Exabeam SIEM/AA
To do that you will need to add a SIEM in SkyFormation app and configure it to be the
Please follow the steps described at:
Adding a SIEM to SkyFormation
Make sure you see in Exabeam the test event sent from SkyFormation.