11.6 Installing Additional Collector Managers and Correlation Engines

By default, Sentinel installs a Collector Manager and a Correlation Engine. Depending on your environment, you might need additional Collector Managers and Correlation Engines. For information about the advantages of additional Collector Managers and Correlation Engines, see Section 9.1, Advantages of Additional Collector Managers and Section 9.2, Advantages of Additional Correlation Engines.

IMPORTANT:You must install the additional Collector Manager or the Correlation Engine on separate systems. The remote Collector Manager or the remote Correlation Engine must not be on the same system where the Sentinel server is installed.

11.6.1 Installation Checklist

Ensure that you have completed the following tasks before starting the installation.

  • Make sure that your hardware and software meet the minimum requirements. For more information, see Section 5.0, Meeting System Requirements.

  • Synchronize time by using the Network Time Protocol (NTP).

  • A Collector Manager requires network connectivity to the message bus port (61616) on the Sentinel server. Before you start installing the Collector Manager, make sure that all firewall and network settings are allowed to communicate over this port.

11.6.2 Installing Additional Collector Managers and Correlation Engines

  1. Launch the Sentinel Web interface by specifying the following URL in your Web browser:

    https://<IP_Address_Sentinel_server>:8443.
    

    The <IP_Address_Sentinel_server> is the IP address or DNS name of the Sentinel server and 8443 is the default port for the Sentinel server.

    Log in with the username and password specified during the installation of the Sentinel server.

  2. In the toolbar, click Downloads.

  3. Under the Collector Manager heading, click Download Installer.

  4. Click Save File to save the installer to the desired location.

  5. Specify the following command to extract the installation file.

    tar zxvf <install_filename>
    

    Replace <install_filename> with the actual name of the install file.

  6. Change to the directory where you extracted the installer.

  7. Specify the following command to install the Collector Manager or the Correlation Engine:

    For Collector Manager:

    ./install-cm
    

    For Correlation Engine:

    ./install-ce
    

    The install script first checks for the available memory and disk space. If the available memory is less than 1.5 GB, the script automatically terminates the installation.

  8. Specify the number for the language you want to use for the installation.

    The end user license agreement is displayed in the selected language.

  9. Press the Spacebar to read through the license agreement.

  10. Enter yes or y to accept the license agreement and continue with the installation.

    The installation might take a few seconds before prompting for the configuration type.

  11. When prompted, specify 1 to proceed with the standard configuration.

  12. Enter default Communication Server Hostname or IP Address of the machine on which Sentinel is installed.

  13. Specify the username and password for the Collector Manager or the Correlation Engine.

    The username and password are stored in the /<install_dir>/etc/opt/novell/sentinel/config/activemqusers.properties file located in the Sentinel server.

  14. Accept the certificate permanently when prompted.

  15. Enter yes or y to enable FIPS 140-2 mode in sentinel and continue with the FIPS configuration.

  16. Continue with the installation as prompted until installation is complete.

11.6.3 Adding a Custom User for the Collector Manager or Correlation Engine

Sentinel recommends that you use the default usernames for the remote Collector Manager and Correlation Engine. However, if you have installed multiple remote Collector Managers and you want to identify them separately, you can create new users:

  1. Log in to the server as the user who has access to the installation files for Sentinel.

  2. Open the activemqgroups.properties file.

    This file is located in the /<install_dir>/etc/opt/novell/sentinel/config/ directory.

  3. Add the new usernames separated by comma as follows:

    For Collector Manager, add the new users in the cm section. For example:

    cm=collectormanager,cmuser1,cmuser2,...
    

    For Correlation Engine, add the new users in the admins section. For example:

    admins=system,correlationengine,ceuser1,ceuser2,...
    
  4. Save and close the file.

  5. Open the activemqusers.properties file.

    This file is located in the /<install_dir>/etc/opt/novell/sentinel/config/ directory.

  6. Add the password for the user you created in Step 3.

    The password can be any random string. For example:

    For Collector Manager users:

    system=c7f34372ecd20d831cceb29e754e5ac9
    collectormanager=1c51ae56
    cmuser1=1b51de55
    cmuser2=1a51ce57
    

    For Correlation Engine users:

    system=c7f34372ecd20d831cceb29e754e5ac9
    correlationengine=68790d7a
    ceuser1=69700c6d
    ceuser2=70701b5c
    
  7. Save and close the file.

  8. Restart the Sentinel server.