Deployment

Deploying Vectra Match including requirements, throughput, licensing, ruleset management, UI and API deployment, and outputting Matches to downstream receivers.

Introduction and requirements

• Overview of Vectra Match, supported deployments, requirements, permissions, performance notes, and unsupported Suricata features.

Licensing

• How Match licensing works, including online renewals and offline activation for QUX.

Ruleset Management Guidance

• Ruleset limits, sourcing, tuning workflow, curated ruleset downloads, lifecycle management, and Suricata variable support.

Deployment (UI and general guidance)

• End-to-end Match deployment using the UI, including enabling Sensors and assigning rulesets.

API Deployment

• Match API overview and deployment examples for RUX (OAuth) and QUX (token), including ruleset upload and assignment.

Outputting Matches to downstream receivers

• Configure Match output via Stream, syslog, Kafka, and Recall.