Agents module¶
The Agents module is used for the central management of agents used in Energy Logserver such as Filebeat, Winlogbeat, Packetbeat, Metricbeat.
Component modules¶
The software consists of two modules:
- Agent Module - installation just like any standard Kibana plugin.
- Agent software - installed on host with agent (like beats);
Agent Module installation¶
All necessary components can be found in the installation folder ./install/Agents/masteragent
.
- Go to installation directory:
cd ./install/Agents/masteragent
Generating the certificates:
cd certificates/
set DOMAIN and DOMAIN_IP in scripts from
./certificates
directory:#!/bin/bash DOMAIN="localhost" DOMAIN_IP="10.4.3.185"
execute the scripts in the following order:
./1_rootca.sh ./2_clientcrt.sh ./3_createstore.sh
Install the required packages:
yum install net-tools
Add an exception to the firewall to listen on TCP 8080 and 8081:
firewall-cmd --permanent --zone public --add-port 8080/tcp firewall-cmd --permanent --zone public --add-port 8081/tcp
Logstash pipeline configuration:
/bin/cp -rf ./logstash/agents_template.json /etc/logstash/templates.d/ mkdir /etc/logstash/conf.d/masteragent /bin/cp -rf ./logstash/*.conf /etc/logstash/conf.d/masteragent/
- Edit file
/etc/logstash/pipelines.yml
by uncomment this line(be awer to this lines looks likes other uncomment lines. It’s yml file.):
- pipeline.id: masteragent path.config: "/etc/logstash/conf.d/masteragent/*.conf
- Logstash SSL configuration:
mkdir /etc/logstash/conf.d/masteragent/ssl /bin/cp -rf ./certificates/domain.key /etc/logstash/conf.d/masteragent/ssl/ /bin/cp -rf ./certificates/domain.crt /etc/logstash/conf.d/masteragent/ssl/ /bin/cp -rf ./certificates/rootCA.crt /etc/logstash/conf.d/masteragent/ssl/ chown -R logstash:logstash /etc/logstash
- Edit file
Linux Agent installation¶
Copy necessary files to destination host:
/bin/cp -rf ./install/Agents/masteragent/agents/linux/masteragent /opt/masteragent /bin/cp -rf ./install/Agents/masteragent/certificates/node_name.p12 /opt/masteragent /bin/cp -rf ./install/Agents/masteragent/certificates/root.jks /opt/masteragent /bin/cp -rf ./install/Agents/masteragent/agents/linux/masteragent/masteragent.service /usr/lib/systemd/system/masteragent.service
Set correct IP address of Logstash and Kibana in /opt/masteragent/agent.conf and verify paths for Filebeat, Metricbeat, etc. are correct.
systemctl daemon-reload systemctl enable masteragent systemctl start masteragent
Restart logstash:
systemctl restart logstash
In the GUI, in the Agents tab, you can check the status of the newly connected host.
Windows Agent installation¶
Add an exception to the firewall to listen on TCP port 8081.
Add an exception to the firewall enabling connection on TCP LOGSTASH_IP:8080 port.
Copy content of the ./agents/windows from installation directory to “C:\Program Files\MasterAgnet”
Change IP address of the Kibana GUI server and Logstash server in “C:\Program Files\MasterAgnet\agent.conf” file.
In order to install the service, start the console as an administrator and execute the following commands:
cd "C:\Program Files\MasterAgent" agents.exe install agents.exe start
An alternative method of installing the service, run the PowerShell console as administrator and execute the following commands:
New-Service -name masteragent -displayName masteragent - binaryPathName "C:\Program Files\MasterAgent\agents.exe"
Check status of service via services.msc (if stoped, try start it agian).
In the GUI, in the Agents tab, you can check the status of the newly connected host.
Agent module compatibility¶
The Agents module works with Beats agents in the following versions:
Nr | Agent Name | Beats Version | Link to download |
---|---|---|---|
1 |
Filebeat |
OSS 6.8.13 |
https://www.elastic.co/downloads/past-releases/filebeat-oss-6-8-13 |
2 |
Packetbeat |
OSS 6.8.13 |
https://www.elastic.co/downloads/past-releases/packetbeat-oss-6-8-13 |
3 |
Winlogbeat |
OSS 6.8.13 |
https://www.elastic.co/downloads/past-releases/winlogbeat-oss-6-8-13 |
4 |
Metricbeat |
OSS 6.8.13 |
https://www.elastic.co/downloads/past-releases/metricbeat-oss-6-8-13 |
5 |
Heartbeat |
OSS 6.8.13 |
https://www.elastic.co/downloads/past-releases/heartbeat-oss-6-8-13 |
6 |
Auditbeat |
OSS 6.8.13 |
https://www.elastic.co/downloads/past-releases/auditbeat-oss-6-8-13 |
7 |
Logstash |
OSS 6.8.13 |
https://www.elastic.co/downloads/past-releases/logstash-oss-6-8-13 |