Linux Agent Setup

Setting up a Linux agent is straightforward. Follow the below steps to install and validate the agent on Linux Systems.

1. Ensure that the user has administrative privileges to install the agent.

2. Script execution must be enabled in /tmp directory on the linux host

3. Network requirements

• Enable outbound HTTP on port 80 for SecOps Central Server (http://<SecOps Central Server IP>:8000) and outbound HTTP WebSocket (WSS) traffic (port 80) to ws:://<SecOps Central Server IP>:5678

1. Navigate to the Asset Module

• In the top navigation panel of the SecOps platform, click on the Asset module to access the asset management functionality.

2. Initiate the Onboarding Process

• Click on Add Asset to open the asset onboarding form.

• Select the Agent-based option to proceed.

3. Provide Agent Information

• Agent Mode: Select Endpoint to set up the agent directly on the target machines.

• Agent Name: Enter a name for the agent that aligns with your naming conventions for easy identification.

• Operating System: Choose the asset's operating system and its version from the available options.

• Asset Groups: Optionally, assign the asset to one or more asset groups to help categorize and manage it effectively.

• Criticality Level: Set the asset’s criticality level to determine its importance and impact in your operations.

4. Download Agent Details

• After completing the form, click on Download Agent to generate the agent details.

• Navigate to the Notifications section to retrieve the following:

1. Agent Download URL: The link to download the agent installation package.

2. License Key: A unique key to activate the agent during installation.

1. You will receive an agent download link and a license key on the dashboard.

2. Download the installer file on the Linux host:
   wget <agent_download_url>

3. Extract the installer file
   tar -xvf SecOps-Agent.tar.gz

4. Install the agent
   sudo bash install.sh

5. Accept the license terms and enter the provided license key.

1. Check the agent setup on your dashboard in the Assets tab.

2. Alternatively, verify the current status of the agent
   sudo systemctl status secops_service.service

3. If the process is not running, start or restart the "SecopsService".
   sudo systemctl restart secops_service.service