RPM installation

This topic describes how to install Moogsoft AIOps v7.3.x on a single host.

Follow these steps if you have root access to the machine or machines on which you will install Moogsoft AIOps, and you can connect to Yum repositories outside your network from those machines.

To install Moogsoft AIOps in a highly available distributed environment, see Distributed HA Installation.

For Tarball installation steps, see Tarball installation.

Before you begin

Before you start to install Moogsoft AIOps, complete all steps in one of the following documents:

v7.3.x - RPM pre-installation steps: If you have root access to the machine or machines on which you will install Moogsoft AIOps, and you can connect to Yum repositories outside your network from those machines.
v7.3.x - Offline RPM pre-installation steps: If you have root access to the machine or machines on which you will install or upgrade Moogsoft AIOps, but you cannot connect to Yum repositories outside your network from those machines.

Install Moogsoft AIOps

To complete an RPM installation of Moogsoft AIOps v7.3.x, perform the following steps:

Download and install the Moogsoft AIOps RPM packages, using one of the following methods according to your deployment type:

If you are performing an RPM installation:

VERSION=7.3.1.1; yum -y install moogsoft-server-${VERSION} \
moogsoft-db-${VERSION} \
moogsoft-utils-${VERSION} \
moogsoft-search-${VERSION} \
moogsoft-ui-${VERSION} \
moogsoft-common-${VERSION} \
moogsoft-mooms-${VERSION} \
moogsoft-integrations-${VERSION} \
moogsoft-integrations-ui-${VERSION}

If you are performing an offline RPM installation, navigate to the location where you copied the RPM files and install them:
```
yum install *.rpm
```

Edit your ~/.bashrc file to contain the following lines:

export MOOGSOFT_HOME=/usr/share/moogsoft
export APPSERVER_HOME=/usr/share/apache-tomcat
export JAVA_HOME=/usr/java/latest
export PATH=$PATH:$MOOGSOFT_HOME/bin:$MOOGSOFT_HOME/bin/utils

Source the ~/.bashrc file:
```
source ~/.bashrc
```
Run the Percona install script:
```
bash install_percona_nodes.sh;
```
The script guides you through the installation process. To configure a single database node on the same server as Moogsoft AIOps, use these settings:
- Configure Percona as "Primary".
- Do not set the server to "DB only".
- Set the first database node IP address to the server IP address.
- When prompted to enter the IP addresses of the second and third nodes, press Enter to skip these settings.

Initialize Moogsoft AIOps

When the installation process is complete, initialize Moogsoft AIOps as follows:

Run the initialization script moog_init, replacing <zone name> with your desired RabbitMQ VHOST:
```
$MOOGSOFT_HOME/bin/utils/moog_init.sh -I <zone_name> -u root
```
The script prompts you to accept the End User License Agreement (EULA) and guides you through the initialization process.
When asked if you want to change the configuration hostname, say yes and enter the public URL for the server.
Note
When prompted for a password, enter the password for the root database user (not the UNIX system user). If you are installing Percona on this machine for the first time, leave the password blank and press Enter to continue.
The zone_name sets up a virtual host for the Message Bus. If you have multiple systems sharing the same bus, set a different zone name for each.

If you are deploying more than one database, configure HA Proxy to load-balance the database nodes. The following script requires root privileges. Run this script on any host running any Moogsoft AIOps components. Provide your "speedy" Yum repo user credentials when prompted:

cat > aiops_repo.sh << _EOF_
#!/bin/bash
clear
echo "Please provide access credentials for the 'speedy' yum repository in order to run the haproxy setup script"
echo
read -p "AIOps Repository Username: " AIOPS_USER
export AIOPS_USER
read -p "AIOps Repository Password: " -s AIOPS_PASS
export AIOPS_PASS
echo
bash <(curl -s -k https://\$AIOPS_USER:\$AIOPS_PASS@speedy.moogsoft.com/repo/aiops/haproxy_installer.sh)
_EOF_
bash aiops_repo.sh

Restart Moogfarmd and Apache Tomcat:
```
service moogfarmd restart
```

Configure Elasticsearch heap size

The minimum and maximum JVM heap sizes must be large enough to ensure that Elasticsearch starts.

See Finalize and Validate the Install for more information.

Enable the enhanced Content Security Policy (optional)

Moogsoft has provided an optional enhanced Content Security Policy (CSP) as part of this release. CSP is a security standard introduced to prevent Cross Site Scripting (XSS) and other data injection attacks. For more information, see the Mozilla document on Content Security Policy.

The CSP is controlled by Nginx and is disabled by default. To enable it:

Edit the following file:
```
/etc/nginx/conf.d/moog-ui-headers.conf
```
Uncomment the line that starts with add_header Content-Security-Policy and save the file.
Restart Nginx:
```
service nginx reload
```

Note

If you enable the enhanced CSP you must follow the steps below to allow access to external domains. If you want to access the UI with the Safari web browser, you must follow the steps below to configure Moogsoft AIOps for use with Safari.

Allow access to external domains

If you enable the enhanced CSP, the following features require additional configuration to allow access to external domains:

Situation Room plugins to external domains
Situation client tools to external URLs

To allow access to required external domains:

Edit the following file:
```
/etc/nginx/conf.d/moog-ui-headers.conf
```

Add a frame-src directive to the Content-Security-Policy header for the required domain. For example, run the following command to allow Google domains:

sed -i "s/add_header Content-Security-Policy\(.*\)\" always/add_header Content-Security-Policy\1; frame-src 'self' *.google.com\" always/" /etc/nginx/conf.d/moog-ui-headers.conf

Restart Nginx:
```
service nginx reload
```

Note

Moogsoft AIOps allows access to Pendo and WalkMe domains by default.

Configure Moogsoft AIOps for use with Safari

Due to a known issue in the Safari web browser, you must take additional steps if you've enabled the enhanced CSP and you want to access the UI with Safari:

Edit the following file:
```
/etc/nginx/conf.d/moog-ui-headers.conf
```
Add the following websocket URLs to the Content-Security-Policy section of the file. Substitute your hostname for <webhost>:
```
wss://<webhost>/moogpoller/ws
wss://<webhost>/integrations/ws/v1
```
You can update the configuration using a command similar to the following. Substitute your hostname for <webhost>:
```
sed -i.bak "s;connect-src 'self' app;connect-src 'self' wss://<webhost>/moogpoller/ws wss://<webhost>/integrations/ws/v1 app;g" /etc/nginx/conf.d/moog-ui-headers.conf
```
Restart Nginx:
```
service nginx reload
```

Run an unattended installation

The moog_init script provides the ability to run a 'quiet' installation and to automatically accept the terms of the EULA. This means that, instead of manually installing and initializing Moogsoft AIOps, you can write a bash script to automatically do this. For example:

~/moogsoft-aiops-install-7.3*.sh -d ~/moogsoft && ~/moogsoft/bin/utils/moog_init.sh \
-qI MoogsoftAIOps -p MySQLpasswd -u root --accept-eula

Run moog_init.sh -h for a description of all options.

Confirm system ulimits

Ensure the 'moogsoft' system user has sufficient limits by running the following command as root:

runuser -l moogsoft -c 'ulimit -n; ulimit -u;'

If either of the values returned are less than 65536, add the following to the /etc/security/limits.conf file as root:

moogsoft	soft    nofile   65536
moogsoft	hard    nofile   65536
moogsoft	soft    nproc	65535
moogsoft	hard    nproc	65535

Verify the installation

Change passwords for default users

In this section: