Overview
The Linux OS - Agentless monitor facilitates agentless discovery of SSH-enabled devices.
Linux flavors
The following Linux flavors are supported:
- Ubuntu
- Debian
- CentOS
- Fedora
- SUSE
- OpenSUSE
- Red Hat Enterprise Server
- Oracle Server
- Amazon Linux
Components discovered
The gateway discovers the following data:
- Basic device details such as OS, Mac, Make, Model and Serial No.
- BIOS information
- CPU processor information
- Physical disk drives
- Logical disk drives
- Network cards information
- Video cards information
- Services
- Installed applications
Prerequisites
Before starting the discovery process for SSH-enabled devices, provide valid credentials (SSH keys) and IP addresses of SSH-base machines.
If an agent is installed on the Linux machine, the agent is used rather than the gateway.
Linux OS - Agentless Discovery
Agentless discovery uses a Linux gateway instead of an agent to discover SSH-enabled resources.
- Install the gateway.
- Create a discovery profile.
- Scan the devices.
Configure and Install a Linux Integration
From All Clients, select a client.
Go to Setup > Integrations and Apps.
Notes:- If there are already installed applications, it will redirect to the Installed Integrations page where all the installed applications are displayed.
- If there are no installed applications, it will navigate to the Available Integrations and Apps page.
Click +Add on the Installed Integrations page.
From Available Integrations and Apps, search for Linux OS - Agentless using the search option available. Also you can use the All Categories option to search.
Click Add on the Linux OS - Agentless tile.
From the Configurations page, click + ADD.
The Add Configuration page appears.
In the Add Configuration, enter the below details in the Basic Information section:
- Name: Enter the name for the integration.
- Host Name/IP Address: Host name or the IP address provided from the installation.
- SSH Credential: Select an existing credential or create a new credential.
- Click + ADD to create a new credential. In the ADD CREDENTIAL window that appears, enter the following information:
- Name - Enter the name.
- Description - Provide a description.
- Authentication Type - The Password or Keypair option is available.
For the password option, enter the username, password, and confirm password fields. For the keypair option, upload a file through the Upload via file option or provide a link through the Already has a link option. - User Name (mandatory) - Enter the username.
- Password - Enter the password. To ensure that you have typed the correct password, click the eye icon to view the password that you entered.
- Confirm Password - Reenter the password. To ensure that you have typed the correct password, click the eye icon to view the password that you entered.
- Secure - Select the option based on your preference.
- Port - Enter the port number - 22.
- Connection Timeout(ms) - Enter a value.
Click ADD.
- Discover only SSH enabled devices: If you choose this option, only SSH enabled devices are discovered.
Perform Actions: Select the Manage Device checkbox, to manage the devices.
The +Query option is displayed.- Use queries to filter the resources you want to manage.
Note: If you do not select the Manage Device option, the devices will be in the discovered state.
- Use queries to filter the resources you want to manage.
In the Discovery Schedule section, select Recurrence Pattern to add one of the following patterns:
- None: Select this option, If you don’t want to schedule the discovery.
- Hourly: Select this option, If you want to apply the discovery on hourly basis. You can configure this option by choosing: Every hour.
- Daily: Select this option, If you want to apply the discovery daily. You can configure this option by choosing: Every Weekday (Mon-Friday) or Everyday.
- Weekly: Select this option, If you want to apply the discovery on a weekly basis. Configure weekly schedule by selecting: Time preference, Starting date, and Days.
- Monthly: Select this option if you only want to apply discovery on a monthly basis. Configure this by selecting: Time preference, Starting date, and number of days in a month.
Click ADD.
Now the integration is saved and displayed on the configurations page after you save it. From the same page, you are able to Edit and Remove the created configuration.
Click Next. The Installation page is displayed.
In the Installation page, under the SELECT GATEWAY COLLECTOR PROFILE section:
- Click +Add to create a new collector by providing a new name or use the pre-populated name, Or
- Select a collector from the existing list.
Note: The selected gateway should be up and running.
Click Finish.
The integration is now installed and displayed on the Installed Integrations page. Use the search field to find the installed integration.
Modify an Installed Integration or App
See Modify an Installed Integration or Application article.
Note: Select the Linux OS - Agentless application.
Permissions Required and Commands Used
| Attribute | Command | Permission |
|---|---|---|
| KERNEL_NAME | uname | Root permission is not required. |
| SYSTEM_INFORMATION_ALL | uname -a | Root permission is not required. |
| LSB_RELEASE_ALL | lsb_release -a | Root permission is not required. |
| OS_NAME | /etc/os-release | grep PRETTY_NAME | Root permission is not required. |
| OS_VERSION | lsb_release -rs | Root permission is not required. |
| OS_DISTRIBUTION_ID | lsb_release -is | Root permission is not required. |
| CPU_INFORMATION_ALL | /proc/cpuinfo | grep -i 'processor\\|vendor_id\\|cpu family\\|model name\\|cpu MHz\\|cpu cores\\|power management' | Root permission is not required. |
| PROCESSOR_SPEED | lscpu | grep -i mhz | Root permission is not required. |
| PROCESSOR_TYPE | lscpu | grep -i 'model name' | Root permission is not required. |
| PROCESSOR_COUNT | lscpu | Root permission is not required. |
| PROCESSOR_WIDTH | lshw -C cpu | grep 'bus info\\|width' | Root permission is not required. |
| PROCESSOR_L2_CACHE_SIZE | /sys/devices/system/cpu/cpu | Root permission is not required. |
| WHOAMI | whoami | Root permission is not required. |
| HOST_ADDRESSES | domainname -i | Root permission is not required. |
| ALL_HOST_ADDRESSES | domainname -I | Root permission is not required. |
| DNS_DOMAIN_NAME | domainname -d | Root permission is not required. |
| LONG_HOST_NAME | domainname -f | Root permission is not required. |
| SHORT_HOST_NAME | domainname -s | Root permission is not required. |
| DNS_SERVERS | /etc/resolv.conf | Root permission is not required. |
| DEFAULT_GATEWAY_BY_ROUTE | route -n | Root permission is not required. |
| DEFAULT_GATEWAY_BY_IP | ip route show | Root permission is not required. |
| DEFAULT_GATEWAY_BY_NETSTAT | netstat -rn | Root permission is not required. |
| DEFAULT_GATEWAY_BY_IFCFG_FILE_PATH | /etc/sysconfig/network-scripts/ifcfg-eth0 | Root permission is not required. |
| DEFAULT_GATEWAY_BY_NETWORK_INTERFACES_FILE_PATH | /etc/network/interfaces | Root permission is not required. |
| MEM_INFO | grep MemTotal /proc/meminfo | Root permission is not required. |
| ASSET_TAG_FILE_PATH | /sys/class/dmi/id/chassis_asset_tag | Root permission is not required. |
| HOSTNAME | hostname -s | Root permission is not required. |
| HOSTNAME_WITH_DOMAIN_INFO | hostname -f | Root permission is not required. |
| DOMAIN_INFO | hostname -d | Root permission is not required. |
| NETWORK_INTERFACES_NAMES | /sys/class/net | Root permission is not required. |
| NETWORK_INTERFACE_STATUS | /sys/class/net/ | Root permission is not required. |
| NETWORK_INTERFACE_MACADDRESS | /sys/class/net/ | Root permission is not required. |
| NETWORK_INTERFACE_IPADDRESS | ip addr show | Root permission is not required. |
| RPM_SOFTWARE_INSTALLED_APPLICATIONS | rpm -qa --queryformat \"{'name' : '\"%{NAME}\"', 'architecture' : '\"%{ARCH}\"', 'version' : '\"%{VERSION}\"', 'release': '\"%{RELEASE}\"', 'installdate' : '\"%{INSTALLTIME:date}\"', 'size' : '\"%{SIZE}\"', 'vendor' : '\"%{VENDOR}\"','summary' : '\"%{SUMMARY}\"'\\},\\n\" | Root permission is not required. |
| DEBIAN_SOFTWARE_INSTALLED_APPLICATIONS | dpkg-query --show -f='{\"package\" : \"${Package}\", \"version\" : \"${Version}\", \"installedsize\" : \"${Installed-Size}\", \"comments\" : \"${Comments}\"},\\n' | Root permission is not required. |
| PHYSICAL_DISK_VENDOR_AND_MODEL | cat /sys/class/block/ | Root permission is not required. |
| PHYSICAL_DISK_PARTITIONS | cat /proc/partitions | grep ' | Root permission is not required. |
| PHYSICAL_DISK_MEDIA_TYPE_PATH1 | cat /sys/block/ | Root permission is not required. |
| PHYSICAL_DISK_MEDIA_TYPE_PATH2 | cat /proc/ide/ | Root permission is not required. |
| LOGICAL_DISK_DETAILS | cat /etc/mtab | grep /[sh][d][a-z] | Root permission is not required. |
| LOGICAL_DISK_SPACE_DETAILS | df -h | grep /[sh][d][a-z] | Root permission is not required. |
| BASE_BOARD_MANUFACTURER_FILE_PATH | /sys/class/dmi/id/board_vendor | Root permission is not required. |
| BASE_BOARD_PRODUCT_NAME_FILE_PATH | /sys/class/dmi/id/board_name | Root permission is not required. |
| SYSTEM_MANUFACTURER_FILE_PATH | /sys/class/dmi/id/sys_vendor | Root permission is not required. |
| SYSTEM_PRODUCT_NAME_FILE_PATH | /sys/class/dmi/id/product_name | Root permission is not required. |
| BIOS_VERSION_FILE_PATH | /sys/class/dmi/id/bios_version | Root permission is not required. |
| BIOS_RELEASE_DATE_FILE_PATH | /sys/class/dmi/id/bios_date | Root permission is not required. |
| BIOS_VENDOR_FILE_PATH | /sys/class/dmi/id/bios_vendor | Root permission is not required. |
| BASE_BOARD_SERIAL_NUMBER_FILE_PATH | /sys/class/dmi/id/board_serial | Root permission is required. |
| SYSTEM_SERIAL_NUMBER_FILE_PATH | /sys/class/dmi/id/chassis_serial | Root permission is required. |
| SYSTEM_PRODUCT_UUID_FILE_PATH | /sys/class/dmi/id/product_uuid | Root permission is required. |
Use Case
Behavior of Linux OS - Agentless discovery
Assume you have 40 resources that are divided as follows:
- For 10 resources, SSHD enabled with credentials 1
- For 5 resources, SSHD enabled with credentials 2
- For 25 resources, SSHD is not enabled
Scenario-1: Create a configuration with credentials 1
- If “Discover only SSH enabled devices” option enabled: Only the 10 resources of credentials 1 will get discovered with valid data (OS, Make, and Model).
- If “Discover only SSH enabled devices” option disabled: 10 resources of credentials 1 will get discovered with valid data (OS, Make, and Model) and 25 resources for which SSHD not enabled will get discovered with resource type as Other.
Scenario-2: Create a configuration with credentials 2
- If “Discover only SSH enabled devices” option enabled: Only the 5 resources of credentials 2 will get discovered with valid data (OS, Make, and Model).
- If “Discover only SSH enabled devices” option disabled: 5 resources of credentials 2 will get discovered with valid data (OS, Make, and Model) and 25 resources for which SSHD not enabled will get discovered with resource type as Other.
Scenario-3: Create a configuration with credentials 3 (invalid credentials)
- If “Discover only SSH enabled devices” option enabled: No resource will be discovered.
- If “Discover only SSH enabled devices” option disabled: All 40 resources will get discovered with resource type as Other.