Install Integrated Log Collector

You can install an integrated Log Collector on a JA2500 appliance or Junos Space virtual appliance. The integrated Log Collector is installed on Junos Space node (JA2500 appliance or virtual appliance) and it works as both the Log Receiver node and Log Storage node. Integrated Log Collector supports only 500 eps.

Before You Begin

• Integrated Log Collector uses port 9200, 514, and 4567.

• Junos Space Network Management Platform must be configured with Ethernet Interface eth0 and management IP addresses.

• OpenNMS must be disabled on Junos Space Network Management Platform.

• Ethernet Interface eth0 on the Junos Space Network Management Platform must be connected to the network to receive logs.

• /var should have a minimum of 500-GB disk space for the integrated Log Collector installation to complete.

Table 1 shows the specifications for installing the integrated Log Collector on a JA2500 appliance.

Table 2 shows the specifications for installing the integrated Log Collector on Junos Space virtual appliance.

To install an integrated Log Collector on a JA2500 appliance or virtual appliance:

1. Download the integrated Log Collector script from the download site.
2. Copy the integrated Log Collector script to a JA2500 appliance or virtual appliance.
3. Connect to the CLI of JA2500 appliance or virtual appliance with admin privileges.
4. Navigate to the location where you have copied the integrated Log Collector script.
5. Change the file permission using the following command:

   chmod +x Integrated-Log-Collector-xx.xxx.xxx.sh

   For example, chmod +x Integrated-Log-Collector-20.1R1.xxx.sh

6. Install the integrated Log Collector script using the following command:

   ./Integrated-Log-Collector-xx.xxx.xxx.sh

   For example, ./Integrated-Log-Collector-20.1R1.xxx.sh

   • The installation stops if the following error message is displayed while installing the integrated Log Collector on the virtual appliance. You must expand the virtual appliance disk size to proceed with the installation.

     ERROR: Insufficient HDD size, Please upgrade the VM HDD size to minimum 500 GB to install Log Collector

     To expand the hard disk size for the Junos Space virtual appliance:

     1. Add a 500 GB capacity hard disk on the Junos Space virtual appliance through VMware vSphere client.
     2. Connect to the console of the Junos Space virtual appliance through SSH.
     3. Select Expand VM Drive Size.
     4. Enter the admin password and expand /var with 500 GB.
     5. Once /var is expanded, you are prompted for any further HDD expansion. Select No to reboot the system.Note

        Junos Space Network Management Platform must be active and functioning. You must be able to log in to the Junos Space Network Management Platform and Security Director user interfaces before attempting to run the integrated Log Collector setup script again.

     6. After the disk size is expanded and Junos Space Network Management Platform and Security Director user interfaces are accessible, run the following command:

        ./Integrated-Log-Collector-xx.xxx.xxx.sh

        For example, ./Integrated-Log-Collector-20.1R1.xxx.sh

   • The installation stops if the following error message is displayed while installing the integrated Log Collector on a JA2500 appliance or virtual appliance. You must disable OpenNMS by following the steps mentioned in the error message to proceed with the installation.

     ERROR: Opennms is running...
     
     Please try to disable opennms as described below or in document and retry Log Collector installation...
     
     STEPS: Login to Network Management Platform --> Administration --> Applications
     
     Right Click on Network Management Platform --> Manage Services -> Select Network Monitoring and click Stop
     
     Service Status should turn to Disabled

     After OpenNMS is disabled, run the following command:

     ./Integrated-Log-Collector-xx.xxx.xxx.sh

     For example, ./Integrated-Log-Collector-20.1R1.xxx.sh

   When the integrated Log Collector is installed on the JA2500 appliance or virtual appliance, the following message is displayed:

   Shutting down system logger: [ OK ]
   
   Starting jingest ... jingest started.
   
   {"log-collector-node": {"id":376,"ip-address":"x.x.x.x","priority":0,"node-type": "INTEGRATED","cpu-usage":0,"memory-usage":0, "fabric-id":0,"display-name": "Integrated","timestamp":0}}

   After the installation is complete, a logging node is automatically added in Administration > Logging Management > Logging Nodes.