# Azure Stream deployment

### Azure Stream Deployment

The Stream software is available in the Azure Marketplace for easy deployment.

* Browse to the Azure Marketplace, search for **Vectra** to find Stream, click **Create** on **Cognito Stream**:

![](https://4227135129-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2FHJ1ltuWFvsArFWtevnRn%2Fuploads%2Fgit-blob-e833d05b78e829ddbbbba0cab5b7f173745207de%2Fazure-stream-deployment-1.png?alt=media)

* You will now need to fill in details on the **Create Vectra Sensor & Stream for Azure** screen that follows.

During this process you will be asked to fill in the following fields:

* **Subscription** – This should default to your current subscription. All resources in an Azure subscription are billed together.
* **Resource group** – Stream must be deployed in an empty resource group. Either select an existing empty resource group, or create a new resource group using the **Create new** link.
* **Region** – Select the region to deploy Stream into. To optimize costs, always keep the source and target (Brain and Stream) in the same region.
* **Base Name** – Base name for all the resources that will be created as part of this deployment.
* **Instance Size** – VM instance size for Stream. **Standard DS4 v2** supports up to 10 Gbps and **Standard DS5 v2** supports up to 20 Gbps.

![](https://4227135129-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2FHJ1ltuWFvsArFWtevnRn%2Fuploads%2Fgit-blob-a386b61084f8ffecf131f65b348da1bead545249%2Fazure-stream-deployment-2.png?alt=media)

* **Brain Hostname or IP Address** - The IP address or the Fully Qualified Domain Name (FQDN hostname) of the Vectra Brain.
  * This address must be reachable from the Sensor’s management subnet over port 22 and 443.
* **Registration Token** - This token must be copied from the Vectra UI.
  * The token is valid for 24 hours and can be regenerated on-demand.
  * A valid registration token must be presented by Stream in order to pair with the Brain.
  * Instructions to generate a Sensor registration token are shown in [Cloud Sensor Registration Token](#cloud-sensor-registration-token).
    * Stream pairs and communicates like a Sensor so “Sensor” language is sometimes used when referring to Stream in the UI or CLI.
* **Public SSH Key** – Generate an RSA SSH key pair using any standard tool. Enter the public key in this field. Retain the private key safely for SSH access to the Sensor.
  * This will allow the `vectra` user to log into the Sensor’s command line interface.
  * Azure has a **SSH Keys** function that can be loaded in another tab to generate a key pair.
  * You may need to make the key readable to you using a command such as:
    * `chmod 400 vectra.pem`
  * Example login command:
    * `ssh -i <private key path> vectra@BrainHostnameOrIP`
* **SSH user (only ‘vectra’ will work)** – Leave this at the default.

![](https://4227135129-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2FHJ1ltuWFvsArFWtevnRn%2Fuploads%2Fgit-blob-3ced6f83e3e8e678fc7dde1081cb7119df1ea140%2Fazure-stream-deployment-3.png?alt=media)

* Click **Review + create** and you’ll be presented with a screen where you can review your configuration before creating.

![](https://4227135129-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2FHJ1ltuWFvsArFWtevnRn%2Fuploads%2Fgit-blob-f4fb73116a8cd655966e9f01692aeee7ce4d7467%2Fazure-stream-deployment-4.png?alt=media)

* Click **Create**.
  * Some status messages will appear on the top right and then you will see another screen with full details as the deployment progresses and then completes. Stream will then attempt to Pair.

![](https://4227135129-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2FHJ1ltuWFvsArFWtevnRn%2Fuploads%2Fgit-blob-00e730939e9a4a2bd538756f495bcd5f2f0f3545%2Fazure-stream-deployment-5.png?alt=media)