Skip to main content

How to ship logs to your collector using Orbital on Windows

This guide will walk you through all the steps you need to know to deploy the Orbital Agent as a log shipper on Windows

Written by Alan Butcher
Updated today

This deployment requires one of our Enterprise or Advanced packages and a Log Collector configured as instructed in our guide at: need to add link

Before you get started

Before shipping logs to our SIEM platform, you must first deploy a log collector. If you already have a log collector deployed, please follow the steps outlined below.

System requirements

Before you begin, the Orbital Agent has the following system requirements. Please ensure the devices you're deploying to meet these requirements.

Operating System

Windows 10 & Windows 11 (64-bit)

CPU

1 GHz dual-core processor

RAM

Minimum 4GB

Disk

500GB free disk space

Manual Deployment

Deploying the Orbital Agent into your environment as a log shipper is super straightforward.

  1. Log in to your my.defense.com account

  2. Select Endpoints from the navigation on the left-hand side

  3. Click Orbital Agent from the sub-navigation

  4. From the Orbital Agent index page, click Installation Links in the top right-hand corner

  5. You'll then be presented with a modal where you can select the Endpoint Group, retrieve the Group Installation key and Download Agent Installer

  6. Once you've downloaded and run the installer, you'll be presented with the installation interface. Click Next to begin the installation

  7. Select your installation folder; this will default to C:\Program Files\Defensecom\Orbital and click Next

  8. From the Select Components section, select Log Generation, and click Next

  9. You'll then be asked to select where shortcuts are stored; this will default to a folder called Orbital

  10. Click Next, and Install to complete the installation

  11. Finally, click Finish, and the installation is complete

Local admin access is required to complete the installation - you may be prompted to enter your username and password by Windows User Access Control

Automated Deployment

Deploying Orbital to multiple machines using Mobile Device Management tools such as Intune is quick and easy. To do this, simply deploy the Orbital installer and run the following command, replacing <installer filepath> with the full file path for the installer <key> with your Company Key.
​

"installer filepath" --accept-licenses --confirm-command install GroupKey=<key>

And that's it! You've successfully deployed Defense.com's Orbital Agent as a log shipper 🎉

Did this answer your question?