TIBCO LogLogic® Log Management Intelligence (LMI) Enterprise Virtual Appliance Quick Start Guide
Software Release 5.5.1 November 2014
Two-Second Advantage® Important Information SOME TIBCO SOFTWARE EMBEDS OR BUNDLES OTHER TIBCO SOFTWARE. USE OF SUCH EMBEDDED OR BUNDLED TIBCO SOFTWARE IS SOLELY TO ENABLE THE FUNCTIONALITY (OR PROVIDE LIMITED ADD-ON FUNCTIONALITY) OF THE LICENSED TIBCO SOFTWARE. THE EMBEDDED OR BUNDLED SOFTWARE IS NOT LICENSED TO BE USED OR ACCESSED BY ANY OTHER TIBCO SOFTWARE OR FOR ANY OTHER PURPOSE. USE OF TIBCO SOFTWARE AND THIS DOCUMENT IS SUBJECT TO THE TERMS AND CONDITIONS OF A LICENSE AGREEMENT FOUND IN EITHER A SEPARATELY EXECUTED SOFTWARE LICENSE AGREEMENT, OR, IF THERE IS NO SUCH SEPARATE AGREEMENT, THE CLICKWRAP END USER LICENSE AGREEMENT WHICH IS DISPLAYED DURING DOWNLOAD OR INSTALLATION OF THE SOFTWARE (AND WHICH IS DUPLICATED IN THE LICENSE FILE) OR IF THERE IS NO SUCH SOFTWARE LICENSE AGREEMENT OR CLICKWRAP END USER LICENSE AGREEMENT, THE LICENSE(S) LOCATED IN THE “LICENSE” FILE(S) OF THE SOFTWARE. USE OF THIS DOCUMENT IS SUBJECT TO THOSE TERMS AND CONDITIONS, AND YOUR USE HEREOF SHALL CONSTITUTE ACCEPTANCE OF AND AN AGREEMENT TO BE BOUND BY THE SAME. This document contains confidential information that is subject to U.S. and international copyright laws and treaties. No part of this document may be reproduced in any form without the written authorization of TIBCO Software Inc. TIBCO, Two-Second Advantage, and LogLogic are either registered trademarks or trademarks of TIBCO Software Inc. in the United States and/or other countries. All other product and company names and marks mentioned in this document are the property of their respective owners and are mentioned for identification purposes only. THIS SOFTWARE MAY BE AVAILABLE ON MULTIPLE OPERATING SYSTEMS. HOWEVER, NOT ALL OPERATING SYSTEM PLATFORMS FOR A SPECIFIC SOFTWARE VERSION ARE RELEASED AT THE SAME TIME. SEE THE README FILE FOR THE AVAILABILITY OF THIS SOFTWARE VERSION ON A SPECIFIC OPERATING SYSTEM PLATFORM. THIS DOCUMENT IS PROVIDED “AS IS” WITHOUT WARRANTY OF ANY KIND, EITHER EXPRESS OR IMPLIED, INCLUDING, BUT NOT LIMITED TO, THE IMPLIED WARRANTIES OF MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE, OR NON-INFRINGEMENT. THIS DOCUMENT COULD INCLUDE TECHNICAL INACCURACIES OR TYPOGRAPHICAL ERRORS. CHANGES ARE PERIODICALLY ADDED TO THE INFORMATION HEREIN; THESE CHANGES WILL BE INCORPORATED IN NEW EDITIONS OF THIS DOCUMENT. TIBCO SOFTWARE INC. MAY MAKE IMPROVEMENTS AND/OR CHANGES IN THE PRODUCT(S) AND/OR THE PROGRAM(S) DESCRIBED IN THIS DOCUMENT AT ANY TIME. THE CONTENTS OF THIS DOCUMENT MAY BE MODIFIED AND/OR QUALIFIED, DIRECTLY OR INDIRECTLY, BY OTHER DOCUMENTATION WHICH ACCOMPANIES THIS SOFTWARE, INCLUDING BUT NOT LIMITED TO ANY RELEASE NOTES AND "READ ME" FILES. Copyright © 2002-2014 TIBCO Software Inc. ALL RIGHTS RESERVED. TIBCO Software Inc. Confidential Information Contents | 3 Contents
Preface ...... 5 Related Documents ...... 6 Typographical Conventions ...... 7 Connecting with TIBCO Resources ...... 9 How to Join TIBCOmmunity ...... 9 How to Access TIBCO Documentation...... 9 How to Contact TIBCO Support ...... 9
Chapter 1 Setting Up Enterprise Virtual Appliance ...... 11 Introduction to Enterprise Virtual Appliance ...... 12 Minimum Hardware Requirements ...... 12 EVA Download Site...... 12 Enterprise Virtual Appliance Installation ...... 13 Updating EVA Arch...... 13 Setting up a TIBCO LogLogic Enterprise Virtual Appliance ...... 13 Enterprise Virtual Appliance Configuration ...... 14
Enterprise Virtual Appliance Quick Start Guide 4 | Contents
Enterprise Virtual Appliance Quick Start Guide | 5 Preface
The TIBCO LogLogic® Enterprise Virtual Appliance (EVA) enables you to capture and manage log data from all types of sources in your enterprise. TIBCO LogLogic EVA installs within minutes and can begin collecting, aggregating, and analyzing data from connected log sources immediately. This guide enables you to quickly set up the TIBCO Enterprise Virtual Appliance Quick Start GuideLogLogic Enterprise Virtual Appliance in your environment.
Topics
• Related Documents, page 6 • Typographical Conventions, page 7 • Connecting with TIBCO Resources, page 9
Enterprise Virtual Appliance Quick Start Guide 6 | Related Documents
Related Documents
The LogLogic documentation is available on the TIBCO Product Documentation website — https://docs.tibco.com/products/a_z_products. The following documents contain information about the TIBCO LogLogic Appliances: • LogLogic Release Notes — Provides information specific to the release including product information, new features and functionality, resolved issues, known issues and any late-breaking information. Check the LogLogic support web site periodically for further updates. • LogLogic Quick Start Guide — Describes how to get started with your LogLogic Appliance. In addition, the guide includes details about the Appliance hardware for all models. • LogLogic Upgrade Guide — Describes how to configure and upgrade the LogLogic Appliance software. • LogLogic User Guide — Describes how to use the LogLogic solution, viewing dashboard, managing reports, managing alerts, and performing searches. • LogLogic Administration Guide — Describes how to administer the LogLogic solution including all Management and Administration menu options. • LogLogic Log Source Configuration Guide — Describe how to support log data from various log sources. There is a separate manual for each supported log source. These documents include documentation on LogLogic Collectors as well as documentation on how to configure log sources to work with the LogLogic solution. • LogLogic Collector Guides — Describe how to implement support for using a LogLogic Collector for specific log sources such as IBM i5/OS and ISS Site Protector. • LogLogic Web Services API Implementation Guide — Describes how to implement the LogLogic Web Services APIs to manage reports, manage alerts, perform searches, and administrate the system. • LogLogic Syslog Alert Message Format Quick Reference Guide — Describes the LogLogic Syslog alert message format. • LogLogic Online Help — Describes the Appliance user interface, including descriptions for each screen, tab, and element in the Appliance.
Enterprise Virtual Appliance Quick Start Guide Preface | 7
Typographical Conventions
The following typographical conventions are used in this manual.
Table 1 General Typographical Conventions Convention Use code font Code font identifies commands, code examples, filenames, pathnames, and output displayed in a command window. For example: Use MyCommand to start the foo process.
bold code font Bold code font is used in the following ways: • In procedures, to indicate what a user types. For example: Type admin. • In large code samples, to indicate the parts of the sample that are of particular interest. • In command syntax, to indicate the default parameter for a command. For example, if no parameter is specified, MyCommand is enabled: MyCommand [enable | disable]
italic font Italic font is used in the following ways: • To indicate a document title. For example: See TIBCO ActiveMatrix BusinessWorks Concepts. • To introduce new terms For example: A portal page may contain several portlets. Portlets are mini-applications that run in a portal. • To indicate a variable in a command or code syntax that you must replace. For example: MyCommand PathName
Key Key name separated by a plus sign indicate keys pressed simultaneously. For combinations example: Ctrl+C. Key names separated by a comma and space indicate keys pressed one after the other. For example: Esc, Ctrl+Q.
The note icon indicates information that is of special interest or importance, for example, an additional action required only in certain circumstances.
The tip icon indicates an idea that could be useful, for example, a way to apply the information provided in the current section to achieve a specific result.
Enterprise Virtual Appliance Quick Start Guide 8 | Typographical Conventions
Table 1 General Typographical Conventions (Cont’d) Convention Use The warning icon indicates the potential for a damaging situation, for example, data loss or corruption if certain steps are taken or not taken.
Enterprise Virtual Appliance Quick Start Guide Preface | 9
Connecting with TIBCO Resources
How to Join TIBCOmmunity TIBCOmmunity is an online destination for TIBCO customers, partners, and resident experts. It is a place to share and access the collective experience of the TIBCO community. TIBCOmmunity offers forums, blogs, and access to a variety of resources. To register, go to http://www.tibcommunity.com.
How to Access TIBCO Documentation You can access TIBCO documentation here: https://docs.tibco.com
How to Contact TIBCO Support For comments or problems with this manual or the software it addresses, contact TIBCO Support as follows: • For an overview of TIBCO Support, and information about getting started with TIBCO Support, visit this site: http://www.tibco.com/services/support • If you already have a valid maintenance or support contract, visit this site: https://support.tibco.com Entry to this site requires a user name and password. If you do not have a user name, you can request one.
Enterprise Virtual Appliance Quick Start Guide 10 | Connecting with TIBCO Resources
Enterprise Virtual Appliance Quick Start Guide | 11
Chapter 1 Setting Up Enterprise Virtual Appliance
This LogLogic Enterprise Virtual Appliance Quick Start Guide provides simple instructions for quickly getting started with the new Enterprise Virtual Appliance.
Topics
• Introduction to Enterprise Virtual Appliance, page 12 • Enterprise Virtual Appliance Installation, page 13 • Enterprise Virtual Appliance Configuration, page 14
Enterprise Virtual Appliance Quick Start Guide 12 | Chapter 1 Setting Up Enterprise Virtual Appliance
Introduction to Enterprise Virtual Appliance
The Enterprise Virtual Appliance offers a virtual version of the TIBCO LogLogic Log Management Intelligence hardware appliance. The Enterprise Virtual Appliance is distributed in the form of an .ova, compatible with VMware ESX, VMware ESXi, and VMware Workstation. The Enterprise Virtual Appliance has the following characteristics and limitations: • Supports a maximum of 16,000 devices. • Supports a maximum of 500 GB of data storage (extendable to 14,500 GB). • Supports VMware ESX, VMware ESXi 3.5 or later, or VMware Workstation 8.0. • Supports the installation of TIBCO LogLogic Log Source Packages (LSPs). (LSP 27.1 is bundled with the Enterprise Virtual Appliance.) • Can be configured as a Management Station. • 7 - 10 years of raw data retention.
Minimum Hardware Requirements • CPU – Intel Compatible (2 GHz minimum) • Memory – 2 GB minimum; 4 GB recommended • Network Adapter – 1 minimum; up to 6 • Disk – 500 GB; 20 GB for the evaluation version • VM Controller – LSI Logic RAID •VM Hard Drive – SCSI type
EVA Download Site Download the TIBCO LogLogic Enterprise Virtual Appliance from the following location: http://www.loglogic.com/products/downloads/virtual-appliance/. (User registration is required.)
Enterprise Virtual Appliance Quick Start Guide Enterprise Virtual Appliance Installation | 13
Enterprise Virtual Appliance Installation
Updating EVA Arch The LMI EVA instances prior to 5.5.0 were created and distributed with a 32-bit configuration. To utilize the x64 arch on EVA instances prior to 5.5.0 users should update their arch settings. 1. Shutdown the EVA instance. 2. Open the VM setting editing window and right-click the VM and select the Edit settings option. 3. In the editing window click the Options tag. 4. In the Guest Operation System section select Red Hat Enterprise Linux 5 (64-bit-) and click OK.
Setting up a TIBCO LogLogic Enterprise Virtual Appliance
To set up a TIBCO LogLogic Enterprise Virtual Appliance: 1. Ensure that you are using one of the following fully functional VMware products: a. VMware ESX b. VMware ESXi 3.5 or later c. VMware Workstation 8.0 2. Download the Enterprise Virtual *.ova file. 3. Follow the instructions provided by your VMware software for importing *.ova files. 4. Select the file obtained in Step 2 above. The steps above should install a running virtual machine containing the TIBCO LogLogic Enterprise Virtual Appliance on your system. To further configure the Enterprise Virtual Appliance, please refer to “Enterprise Virtual Appliance Configuration” below.
Enterprise Virtual Appliance Quick Start Guide 14 | Chapter 1 Setting Up Enterprise Virtual Appliance
Enterprise Virtual Appliance Configuration
Task A Connecting the Virtual Appliance to a Network 1. In the virtual machine console, log in as user root with password logapp. 2. Once logged in, you are automatically set to read/write mode. There is no read-only console login. 3. Configure the network settings: a. Set the Virtual Appliance IP address and interface network settings: Syntax: Set ip
Task B Logging in to the Virtual Appliance To log in to the Enterprise Virtual Appliance: 1. Open a browser on your workstation and connect to the Virtual Appliance. Enter the IP address defined in Step 1 above in the browser address line. 2. Click YES to accept the certificate. A login screen appears. 3. Enter the default username (admin) and password (admin). The Virtual Appliance displays the End User License Agreement (EULA). 4. Accept the EULA. The Virtual Appliance asks you to enter a new password, containing at least one number.
Enterprise Virtual Appliance Quick Start Guide Enterprise Virtual Appliance Configuration | 15
5. Enter a new password. The Virtual Appliance displays the navigation menu, and a warning that the time is not yet set on the Virtual Appliance. This concern is addressed in Task D.
Task C Configuring Log Source Auto-Identification To configure Log Source Auto-Identification: 1. Under Administration, select System Settings. The General tab appears. 2. Next to Auto-identify Log Sources, click Yes. 3. If you want to enable SSH connections to the Virtual Appliance, next to Enable SSH Daemon at Startup, click Yes. 4. Click Update.
Task D Setting the Time Zone and Time To set the Time Zone and Time: 1. Under Administration, select System Settings and click the Time tab. 2. Select the appropriate Time Zone from the Time Zone drop-down menu. 3. Select Update Time to define how to synchronize your local time. 4. Select Specify Time and manually define the system time (MMDDhhmmYY.ss). 5. Click Update to save your changes. The Virtual Appliance prompts you that an immediate reboot is required. 6. Click OK to let the Virtual Appliance reboot for changes to take effect.
New settings do not go into effect until the Virtual Appliance is restarted.
Enterprise Virtual Appliance Quick Start Guide 16 | Chapter 1 Setting Up Enterprise Virtual Appliance
Enterprise Virtual Appliance Quick Start Guide