Linux OS

Prerequisites:

CloudFabrix RDA provides out of the box agent-less integration for inventory data collection from Linux server OS editions using SSH protocol. Using this integration, inventory data like Linux OS version, server make & model, running services and processes and TCP/UDP network connections will be collected.
Using RDA's integration with Linux Server OS, below are the two primary use cases that are supported and consumed within the CloudFabrix Asset Intelligence and AIOps platforms.
    Linux Server OS inventory &
    Application Dependency
Supported Linux server OS distrobutions are, CentOS, RHEL and Ubuntu.
SSH user account that is used to connect and collect the data should have sudo privileges for the below commands.
    dmidecode
    netstat
    ss
    nsenter**
    docker ps**
    docker ps -a**
    docker inspect**
** Applicable only for docker container environments
On CentOS, RHEL & Ubuntu, edit /etc/sudoersfile and add the above commands for the user account that is used for data collection.
<user_name> ALL=(root) NOPASSWD: /usr/sbin/dmidecode,/usr/bin/netstat,/usr/sbin/ss,/usr/bin/nsenter,/usr/bin/docker ps,/usr/bin/docker ps -a,/usr/bin/docker inspect
Test SSH Connection with CLI access:
To verify the SSH configuration, use ssh command which helps to test the remote connection to target Linux server over SSH protocol and an ability to execute a command.
1
ssh <user-name>@<ip-address> <command>
2
3
ssh [email protected] hostname
Copied!

Adding Linux OS as Datasource/Extension in 'RDA':

Linux OS or any other datasource/extension's configuration is configured in RDA's user interface. Login into RDA's user interface using a browser.
https://<rda-ip-address>:9998
Under 'Notebook', click on 'CFXDX Python 3' box
In the 'Notebook' command box, type botadmin() and alt (or option) + Enter to open datasource administration menu.
Click on 'Add' menu and under Type drop down, select linux-inventory
    type: Datasource/Extension type. In this context, it is 'linux-inventory'
    name: Datasource/Extension label which should be unique within the RDA
    Hostname: IP Address / DNS name of Linux host
    Username: Linux username
    Password: Linux password
    Private Key Passphrase: SSH private key passphrase (optional)
    SSH Private Key: SSH private key (optional)
    Port: 22
Hostname field is only used for a quick network access and authention access check against any one of the valid Linux server host while adding the linux-inventory as a datasource. For actual data collection from Linux servers, it expects IP or IP subnet range as an input during runtime. Please refer the following sections for an example.
Click on 'Check Connectivity' to verify the network access and credentials validity. Once it is validated, click on 'Add' button to add the linux-inventory as a datasource.

Linux OS data exploration in 'RDA':

Once Linux OS integration details are configured in RDA as a datasource, it will be ready to connect to targe Linux servers and explore the data for the analysis.
    Run the below command within the RDA CLI to list the available 'Tags' or 'Bots' for linux-inventory extension. In this example, the Linux extension is labelled as 'linux' which will be referenced within each applicable tag name.
Each listed 'tag' starts with a special character (i.e. * or # or @) and each hints about tag's filtering capability. For more information abut them, please refer to "RDA Terminology"
1
tags linux
2
3
or
4
5
bots linux
Copied!
Enter the below sequence of RDA bot commands to input one or more Linux server IPs for collecting the system information like CPU, Memory, OS Version, BIOS UUID etc. using system-info bot
1
> bot @dm:empty
2
3
@dm:empty> data --> @dm:addrow linux_ip='192.168.134.72,192.168.134.75' --> @linux:system-info column_name='win_ip'
Copied!
Below are supported IP range formats....
192.168.10.10,192.168.10.11 or 192.168.10.10-192.168.10.100 or 192.168.10.0/24,192.168.11.0/24 or combination of these formats as comma separated values.
Run the below bot commands to view the supported parameters for each available bot for Linux data collection.
1
bots @linux:
2
bot @linux:system-info
Copied!
    connect_timeout: Connection timeout while making a connection to target Linux server using SSH protocol. Default value is 30 seconds and it is an optional parameter.
    cli_timeout: SSH CLI timeout while executing remotely on a target Linux server. Default value is 30 seconds and it is an optional parameter.
    column_name: All supported Linux bots are data sinks and each Linux bot expects IP address range column as an input. Ex: columnname='linux_ip' where linux_ip is a column which has IP address range or a list. It is a mandatory parameter.
    concurrent_discovery: It allows to specify total number of parallel data collection jobs connecting to Linux servers. It is an optional parameter and it's default value is 10
Above parameters are common for all of the supported bots of Linux OS
Last modified 1mo ago