Sumologic Collector

From UVOO Tech Wiki
Jump to navigation Jump to search

Linux Install

clobber=false
token=<token>
cd /tmp/
wget "https://collectors.sumologic.com/rest/download/linux/64" -O SumoCollector.sh && chmod +x collector_name=$(hostname | awk '{print tolower($0)}')_events; sudo /opt/sumo/SumoCollector.sh -q -Vclobber=$clobber "-Vcollector.name=${collector_name}" -Vsources=/opt/sumo/ -Vsumo.token_and_url=$token

Linux Uninstall

cd /usr/local/SumoCollector
sudo ./uninstall -q

Windows Install

$token="YOURTOKEN"
$clobber="False"
$install_dir="C:\tmp\sumo"
$hostname=((hostname).tolower())
mkdir -p $install_dir

[System.Net.ServicePointManager]::SecurityProtocol = [System.Net.SecurityProtocolType]'Tls,Tls11,Tls12'
Invoke-WebRequest 'https://collectors.us2.sumologic.com/rest/download/win64' -outfile 'C:\Windows\Temp\SumoCollector.exe'
Invoke-WebRequest 'https://raw.githubusercontent.com/jeremybusk/sumologic/master/windows_default_sources.json' -outfile "$install_dir\sources.json"
C:\Windows\Temp\SumoCollector.exe -console -q "-Vclobber=$clobber" "-Vsumo.token_and_url=$token" "-Vcollector.name=${hostname}_events" "-Vsources=$install_dir\"

Windows Uninstall

uninstall.exe -q -console

Ref