Install the Open Collector
If you are upgrading an existing Open Collector, skip this procedure and go to Upgrade the Open Collector.
If you would like to copy/paste these commands, using PUTTY or other SSH tools will give you better results than using the VM console.
Install WGET if installed using Minimal ISO:
CODEsudo yum install -y wgetDownload the Open Collector Control Script:
CODEwget https://raw.githubusercontent.com/logrhythm/versions/master/lrctlChange permissions:
CODEchmod +x lrctlInitialize the Open Collector and start all components.
The following command installs Docker - Community Edition:
CODEsudo ./lrctl initIf you plan to use a proxy server, additional configuration is necessary. For more information, see Configure Open Collector Via Proxy for steps to take before continuing with this installation.
(Optional.) If you want or need Docker logging to rotate and purge logs in your deployment, follow the steps at Configure Docker Log Rotation before continuing.
Start the Metrics service:
CODEsudo ./lrctl metrics startThe system will prompt you to configure centralized metrics, as a configuration must exist in order to start the Metrics service. Answer the question at the prompt in order to completely start the Metrics service.
Start the Open Collector:
CODEsudo ./lrctl oc start
From this point, continue to the guide that applies to your Open Collector setup:
For customers using the WebUI Web Console to manage the Open Collector: Configure the Open Collector Connection to the SIEM (WebUI)
For customers using the "legacy" syslog method: Configure the Open Collector Connection to the SIEM (Legacy-Syslog)