Install the Open Collector
If you are upgrading an existing Open Collector, skip this procedure and go to Upgrade the Open Collector.
If you would like to copy/paste these commands, using PUTTY or other SSH tools will give you better results than using the VM console.
Install WGET if installed using Minimal ISO:
CODEsudo yum install -y wget
Download the Open Collector Control Script:
CODEwget https://raw.githubusercontent.com/logrhythm/versions/master/lrctl
Change permissions:
CODEchmod +x lrctl
Initialize the Open Collector and start all components.
The following command installs Docker - Community Edition:
CODEsudo ./lrctl init
If you plan to use a proxy server, additional configuration is necessary. For more information, see Configure Open Collector Via Proxy for steps to take before continuing with this installation.
If installing on RHEL 8, modification of the firewalld.conf file is required before starting the Metrics service or the Open Collector. Please see the RHEL 8 installation page for details.
Start the Metrics service:
CODEsudo ./lrctl metrics start
The system will prompt you to configure centralized metrics, as a configuration must exist in order to start the Metrics service. Answer the question at the prompt in order to completely start the Metrics service.
Start the Open Collector:
CODE./lrctl oc start
From this point, continue to the guide that applies to your Open Collector setup:
For customers using the WebUI Web Console to manage the Open Collector: Configure the Open Collector Connection to the SIEM (WebUI)
For customers using the "legacy" syslog method: Configure the Open Collector Connection to the SIEM (Legacy-Syslog)