Tarball installation

Before you begin

Before you start to install Moogsoft AIOps, complete all steps in the following document:

v7.3.x - Tarball pre-installation steps.

Install Moogsoft AIOps

To complete a Tarball installation of Moogsoft AIOps v7.3.x, perform the following steps:

Download the tarball installer, using one of the following options:
- Download via a web browser from https://speedy.moogsoft.com/installer and user the Yum user credentials provided by Moogsoft support.
- Use the following cURL command, substituting your "speedy" Yum repo user credentials:
```
curl -L -O "https://<username>:<password>@speedy.moogsoft.com/installer/moogsoft-aiops-7.3.1.1.tgz"
```
Optional: GPG key validation of the Tarball

To validate the Tarball before installation:
1. Download the key. For example for 7.3.1.5 or later:
```
https://keys.openpgp.org/vks/v1/by-fingerprint/887B323F485F122FE923214FD01B4B4B6F379E7E
```
  For 7.3.1.4 and prior:
```
https://keys.openpgp.org/vks/v1/by-fingerprint/2529C94A49E42429EDAAADAEC7A2253BFC50512A 
```
2. Copy the key to the server onto which the Tarball will be installed (it will be a .asc file).
3. Import the key. For example, for 7.3.1.5 and later:
```
gpg --import 887B323F485F122FE923214FD01B4B4B6F379E7E.asc
```
4. Download the moogsoft-aiops-7.3.1.1.tgz.sig file from the same 'speedy' path:
```
curl -L -O "https://<username>:<password>@speedy.moogsoft.com/installer/moogsoft-aiops-7.3.1.1.tgz.sig"
```
5. Ensure both the tgz and the .sig file are both in the same folder, then copy the following command into a bash terminal and run it to perform the validation:
```
gpg --verify moogsoft-aiops-7.3.1.1.tgz.sig moogsoft-aiops-7.3.1.1.tgz
```
6. Confirm that the report states:
```
Good signature from "Moogsoft Information Security Team "<security@moogsoft.com>"
```
Unzip and untar the Moogsoft AIOps distribution archive in your working directory:
```
tar -xf moogsoft-aiops-7.3.1.1.tgz
```
The distribution archive contains the following files:
- A README.txt file
- The installation script: moogsoft-aiops-install-7.3.1.1.sh
- The distribution archive: moogsoft-aiops-dist-7.3.1.1.tgz
Execute the installation script moogsoft-aiops-install-7.3.1.1.sh in your working directory to install Moogsoft AIOps.
```
bash moogsoft-aiops-install-7.3.1.1.sh
```
The script guides you through the installation process. The installation directory defaults to <working-directory>/Moogsoft. You can change this if you wish.
Set the $MOOGSOFT_HOME environment variable to point to your installation directory, and add $MOOGSOFT_HOME/bin/utils to the path. For example:
```
echo "export MOOGSOFT_HOME=~/moogsoft" >> ~/.bashrc
echo "export PATH=$PATH:\$MOOGSOFT_HOME/bin/utils" >> ~/.bashrc && \
source ~/.bashrc
```

Initialize Moogsoft AIOps

When the installation process is complete, initialize Moogsoft AIOps as follows:

Configure the Toolrunner to execute locally by setting "execute_locally: true" in $MOOGSOFT_HOME/config/servlets.conf:
```
sed -i 's/# execute_locally: false,/,execute_locally: true/1' $MOOGSOFT_HOME/config/servlets.conf
```
Run the Percona installation script:
```
bash install_percona_nodes_tarball.sh
```
The script guides you through the installation process. To configure a single database node on the same server as Moogsoft AIOps, use these settings:
- Configure Percona as "Primary".
- Do not set the server to "DB only".
- Set the first database node IP address to the server IP address.
- When prompted to enter the IP addresses of the second and third nodes, press Enter to skip these settings.
Source the bashrc file so mysql is on the path:
```
source ~/.bashrc
```
To initialize Moogsoft AIOps, you run the initialization script moog_init.

You can run this script with the -k flag to set processes (for example Percona, RabbitMQ, Moogfarmd) to automatically restart when you reboot the system. For example:
```
$MOOGSOFT_HOME/bin/utils/moog_init.sh -kI <zone_name> -u root
```
If you do not want to set these processes to automatically restart when you reboot the system, run this script without the -k flag. For example:
```
$MOOGSOFT_HOME/bin/utils/moog_init.sh -I <zone_name> -u root
```
If you then decide after you have finished the install that you want these processes to automatically restart after all, run:
```
[ -z "$(crontab -l|grep process_keepalive.sh)" ] && (crontab -l; echo -e "*\t*\t*\t*\t* $MOOGSOFT_HOME/bin/utils/process_keepalive.sh 2>&1") | crontab -
```
The moog_init script prompts you to accept the End User License Agreement (EULA) and guides you through the initialization process.

When asked if you want to change the configuration hostname, say yes and enter the public URL for the server.

Note

When prompted for a password, enter the password for the root database user (not the UNIX system user). If you are installing Percona on this machine for the first time, leave the password blank and press Enter to continue.

The zone_name sets up a virtual host for the Message Bus. If you have multiple systems sharing the same bus, set a different zone name for each.

For more information see Configure Services to Restart.

Restart Moogfarmd and Apache Tomcat:

$MOOGSOFT_HOME/bin/utils/process_cntl moog_farmd restart
$MOOGSOFT_HOME/bin/utils/process_cntl apache-tomcat restart

Configure Elasticsearch heap size

The minimum and maximum JVM heap sizes must be large enough to ensure that Elasticsearch starts.

See Finalize and Validate the Install for more information.

Disable the enhanced Content Security Policy (optional)

Moogsoft has provided an optional enhanced Content Security Policy (CSP) as part of this release. CSP is a security standard introduced to prevent Cross Site Scripting (XSS), Cross Site Request Forgery (CSRF), and other data injection attacks. For more information, see the Mozilla document on Content Security Policy.

The CSP is controlled by Nginx and is enabled by default. You can optionally disable it:

Edit the following file:

$MOOGSOFT_HOME/cots/nginx/config/conf.d/moog-ui-headers.conf

Comment the line that starts with add_header Content-Security-Policy and save the file.

Restart Nginx:

$MOOGSOFT_HOME/bin/utils/process_cntl nginx restart

Note

If you enable the enhanced CSP you must follow the steps below to allow access to external domains. If you want to access the UI with the Safari web browser, you must follow the steps below to configure Moogsoft AIOps for use with Safari.

Allow access to external domains

If you enable the enhanced CSP, the following features require additional configuration to allow access to external domains:

Situation Room plugins to external domains
Situation client tools to external URLs

To allow access to required external domains:

Edit the following file:

$MOOGSOFT_HOME/cots/nginx/config/conf.d/moog-ui-headers.conf

Add a frame-src directive to the Content-Security-Policy header for the required domain. For example, run the following command to allow Google domains:

sed -i "s/add_header Content-Security-Policy\(.*\)\" always/add_header Content-Security-Policy\1; frame-src 'self' *.google.com\" always/" $MOOGSOFT_HOME/cots/nginx/config/conf.d/moog-ui-headers.conf

Restart Nginx:

$MOOGSOFT_HOME/bin/utils/process_cntl nginx restart

Note

Moogsoft AIOps allows access to Pendo and WalkMe domains by default.

Configure Moogsoft AIOps for use with Safari

Due to a known issue in the Safari web browser, you must take additional steps if you've enabled the enhanced CSP and you want to access the UI with Safari:

Edit the following file:

$MOOGSOFT_HOME/cots/nginx/config/conf.d/moog-ui-headers.conf

Add the following websocket URLs to the Content-Security-Policy section of the file. Substitute your hostname for <webhost>:
```
wss://<webhost>/moogpoller/ws
wss://<webhost>/integrations/ws/v1
```
You can update the configuration using a command similar to the following. Substitute your hostname for <webhost>:
```
sed -i.bak "s;connect-src 'self' app;connect-src 'self' wss://<webhost>/moogpoller/ws wss://<webhost>/integrations/ws/v1 app;g" $MOOGSOFT_HOME/cots/nginx/config/conf.d/moog-ui-headers.conf
```

Restart Nginx:

$MOOGSOFT_HOME/bin/utils/process_cntl nginx restart

Run an unattended installation

The moog_init script provides the ability to run a 'quiet' installation and to automatically accept the terms of the EULA. This means that, instead of manually installing and initializing Moogsoft AIOps, you can write a bash script to automatically do this. For example (for v8.0.0):

~/moogsoft-aiops-install-8.0*.sh -d ~/moogsoft && ~/moogsoft/bin/utils/moog_init.sh \
-qI MoogsoftAIOps -p MySQLpasswd -u root --accept-eula

Run moog_init.sh -h for a description of all options.

Verify the installation

Change passwords for default users

Install Moogsoft Add-Ons

Moogsoft periodically releases add-ons to extend and enhance the core Moogsoft AIOps functionality. For example, new Workflow Engine functions, new Workflow Engines, or Integrations tiles. All add-ons releases are cumulative and include the fixes from previous releases.

Once you have finished upgrading or installing Moogsoft AIOps, you should install the Moogsoft AIOps add-ons to ensure you have the latest version.

See Install Moogsoft Add-ons for more information on how to install the Moogsoft AIOps add-ons.

Tarball installation

Before you begin

Install Moogsoft AIOps

Initialize Moogsoft AIOps

Note

Configure Elasticsearch heap size

Disable the enhanced Content Security Policy (optional)

Note

Allow access to external domains

Note

Configure Moogsoft AIOps for use with Safari

Run an unattended installation

Verify the installation

Change passwords for default users

Install Moogsoft Add-Ons

Search results