RPM Installation

This topic describes how to install Moogsoft Enterprise v8.0.x on a single host.

Follow these steps if you have root access to the machine or machines on which you will install Moogsoft Enterprise, and you can connect to Yum repositories outside your network from those machines.

To install Moogsoft Enterprise in a highly available distributed environment, see HA Installation.

For Tarball installation steps, see Tarball Installation.

Before you begin

Before you start to install Moogsoft Enterprise, complete all steps in one of the following documents:

Online RPM pre-installation: If you have root access to the machine or machines on which you will install Moogsoft Enterprise, and you can connect to Yum repositories outside your network from those machines.
Moogsoft Enterprise - Offline RPM pre-installation: If you have root access to the machine or machines on which you will install or upgrade Moogsoft Enterprise, but you cannot connect to Yum repositories outside your network from those machines.

Install Moogsoft Enterprise

To complete an RPM installation of Moogsoft Enterprise v8.0.x, perform the following steps:

Download and install the Moogsoft Enterprise RPM packages, using one of the following methods according to your deployment type:

If you are performing an RPM installation:

VERSION=8.0.0.1; yum -y install moogsoft-server-${VERSION} \
moogsoft-db-${VERSION} \
moogsoft-utils-${VERSION} \
moogsoft-search-${VERSION} \
moogsoft-ui-${VERSION} \
moogsoft-common-${VERSION} \
moogsoft-mooms-${VERSION} \
moogsoft-integrations-${VERSION} \
moogsoft-integrations-ui-${VERSION}

If you are performing an offline RPM installation, navigate to the location where you copied the RPM files and install them:
```
yum install *.rpm
```

Edit your ~/.bashrc file to contain the following lines:

export MOOGSOFT_HOME=/usr/share/moogsoft
export APPSERVER_HOME=/usr/share/apache-tomcat
export JAVA_HOME=/usr/java/latest
export PATH=$PATH:$MOOGSOFT_HOME/bin:$MOOGSOFT_HOME/bin/utils

Source the ~/.bashrc file:
```
source ~/.bashrc
```
Run the Percona install script:
```
bash install_percona_nodes.sh;
```
The script guides you through the installation process. To configure a single database node on the same server as Moogsoft Enterprise, use these settings:
- Configure Percona as "Primary".
- Do not set the server to "DB only".
- Set the first database node IP address to the server IP address.
- When prompted to enter the IP addresses of the second and third nodes, press Enter to skip these settings.

Initialize Moogsoft Enterprise

When the installation process is complete, initialize Moogsoft Enterprise as follows:

Run the initialization script moog_init, replacing <zone name> with your desired RabbitMQ VHOST:
```
$MOOGSOFT_HOME/bin/utils/moog_init.sh -I <zone_name> -u root
```
The script prompts you to accept the End User License Agreement (EULA) and guides you through the initialization process.
When asked if you want to change the configuration hostname, say yes and enter the public URL for the server. The public URL is the URL the instance will be connected to through a browser.
Note
When prompted for a password, enter the password for the root database user (not the UNIX system user). If you are installing Percona on this machine for the first time, leave the password blank and press Enter to continue.
The zone_name sets up a virtual host for the Message Bus. If you have multiple systems sharing the same bus, set a different zone name for each.

If you are deploying more than one database, configure HA Proxy to load-balance the database nodes. The following script requires root privileges. Run this script on any host running any Moogsoft Enterprise components. Provide your "speedy" Yum repo user credentials when prompted:

cat > aiops_repo.sh << _EOF_
#!/bin/bash
clear
echo "Please provide access credentials for the 'speedy' yum repository in order to run the haproxy setup script"
echo
read -p "AIOps Repository Username: " AIOPS_USER
export AIOPS_USER
read -p "AIOps Repository Password: " -s AIOPS_PASS
export AIOPS_PASS
echo
bash <(curl -s -k https://\$AIOPS_USER:\$AIOPS_PASS@speedy.moogsoft.com/repo/aiops/haproxy_installer.sh)
_EOF_
bash aiops_repo.sh

Restart Moogfarmd:
```
service moogfarmd restart
```

Configure Elasticsearch heap size

The minimum and maximum JVM heap sizes must be large enough to ensure that Elasticsearch starts.

See Finalize and Validate the Upgrade for more information.

Enable the enhanced Content Security Policy (optional)

Moogsoft has provided an optional enhanced Content Security Policy (CSP) as part of this release. CSP is a security standard introduced to prevent Cross Site Scripting (XSS) and other data injection attacks. For more information, see the Mozilla document on Content Security Policy.

The CSP is controlled by Nginx and is disabled by default. To enable it:

Edit the following file:
```
/etc/nginx/conf.d/moog-ui-headers.conf
```
Uncomment the line that starts with add_header Content-Security-Policy and save the file.
Restart Nginx:
```
service nginx reload
```

Note

If you enable the enhanced CSP you must follow the steps below to allow access to external domains. If you want to access the UI with the Safari web browser, you must follow the steps below to configure Moogsoft Enterprise for use with Safari.

Allow access to external domains

If you enable the enhanced CSP, the following features require additional configuration to allow access to external domains:

Situation Room plugins to external domains
Situation client tools to external URLs

To allow access to required external domains:

Edit the following file:
```
/etc/nginx/conf.d/moog-ui-headers.conf
```

Add a frame-src directive to the Content-Security-Policy header for the required domain. For example, run the following command to allow Google domains:

sed -i "s/add_header Content-Security-Policy\(.*\)\" always/add_header Content-Security-Policy\1; frame-src 'self' *.google.com\" always/" /etc/nginx/conf.d/moog-ui-headers.conf

Restart Nginx:
```
service nginx reload
```

Note

Moogsoft Enterprise allows access to Pendo and WalkMe domains by default.

Configure Moogsoft Enterprise for use with Safari

Due to a known issue in the Safari web browser, you must take additional steps if you've enabled the enhanced CSP and you want to access the UI with Safari:

Edit the following file:
```
/etc/nginx/conf.d/moog-ui-headers.conf
```
Add the following websocket URLs to the Content-Security-Policy section of the file. Substitute your hostname for <webhost>:
```
wss://<webhost>/moogpoller/ws
wss://<webhost>/integrations/ws/v1
```
You can update the configuration using a command similar to the following. Substitute your hostname for <webhost>:
```
sed -i.bak "s;connect-src 'self' app;connect-src 'self' wss://<webhost>/moogpoller/ws wss://<webhost>/integrations/ws/v1 app;g" /etc/nginx/conf.d/moog-ui-headers.conf
```
Restart Nginx:
```
service nginx reload
```

Confirm system ulimits

Ensure the 'moogsoft' system user has sufficient limits by running the following command as root:

runuser -l moogsoft -c 'ulimit -n; ulimit -u;'

If either of the values returned are less than 65536, add the following to the /etc/security/limits.conf file as root:

moogsoft	soft    nofile   65536
moogsoft	hard    nofile   65536
moogsoft	soft    nproc	65535
moogsoft	hard    nproc	65535

Verify the installation

Change passwords for default users

Install Moogsoft Add-Ons

Moogsoft periodically releases add-ons to extend and enhance the core Moogsoft Enterprise functionality. For example, new Workflow Engine functions, new Workflow Engines, or Integrations tiles. All add-ons releases are cumulative and include the fixes from previous releases.

Once you have finished upgrading or installing Moogsoft Enterprise, you should install the Moogsoft Enterprise add-ons to ensure you have the latest version.

See Install Moogsoft Add-ons for more information on how to install the Moogsoft Enterprise add-ons.

In this section: