Kaspersky Machine Learning for Anomaly Detection

Configuring the MQTT Connector

Kaspersky MLAD uses the MQTT Connector to receive data and send messages about incident registration via the MQTT (Message Queuing Telemetry Transport) protocol.

Configuration of the MQTT Connector is performed by a Kaspersky employee or certified integrator.

To configure the MQTT Connector:

1. In the administrator menu, select System parameters → MQTT Connector.

   A list of options appears on the right.

2. If necessary, move the Use SSL connection toggle button to enable the use of a secure SSL connection.

   By default, use of a secure SSL connection is disabled.

3. In the MQTT broker (address:port) field, specify the host name and port of the external MQTT broker that the MQTT Connector will interact with.

   The default value of this parameter is mqtt_broker:1883.

4. In the User name for MQTT connection field, enter the user name.
5. In the Password for MQTT connection field, enter the user's password.
6. If you enabled the use of a secure SSL connection, add the root certificate for the MQTT broker in the CA certificate field.

   To delete the certificate file, click the Clear icon (). To save the certificate file on your computer, click the Download icon ().

7. If you need to use client certificates for a secure SSL connection, perform the following actions:
   • In the Client certificate field, add the MQTT client application certificate.
   • In the Key to client certificate field, add the key for the MQTT client application certificate.

   To delete the certificate file or certificate key, click the Clear icon () in the corresponding field. To save the certificate file or certificate key on your computer, click the Download icon () in the corresponding field.

8. In the List of MQTT subscriptions for receiving tags field, enter the name of the list of MQTT subscriptions from which the MQTT Connector will receive tag values.

   The default value of this parameter is tags.

9. In the MQTT topic for publishing messages field, specify the name of the topic where the MQTT Connector will publish messages about incident registration.

   If no value is defined for this setting, messages are not sent.

   This setting has no value by default.

10. In the Data format drop-down list, select the format to receive data from external systems and send incident alerts.

    The following options are available: JSONBatch, Topic, SmartHome, KISG.

    The default value of this parameter is JSONBatch.

    If none of the incident data and alert formats suits you, you can contact Kaspersky Lab experts to add the required format.

11. If you selected Topic data type, in the Connector configuration file field, add a configuration file containing the connector settings for this data format.

    To delete the connector configuration file, click the Clear icon (). To save the connector configuration file on your computer, click the Download icon ().

12. If you need to recalculate the tag values based on the parameter values specified in the preset file, turn on the Scale obtained tag values toggle button.

    By default, scaling of the received data is disabled.

13. Click the Save button.

Kaspersky MLAD will receive data and send messages about incident registration via the MQTT protocol.