RPM Installation

This topic describes how to install Moogsoft Onprem on a single host.

Follow these steps if you have root access to the machine or machines on which you will install Moogsoft Onprem, and you can connect to Yum repositories outside your network from those machines.

To install Moogsoft Onprem in a highly available distributed environment, see High Availability Installation.

For tarball installation steps, see Tarball Installation.Tarball Installation

Before you begin

Before you start to install Moogsoft Onprem, complete all steps in one of the following documents:

Online RPM pre-installation: If you have root access to the machine or machines on which you will install Moogsoft Onprem, and you can connect to Yum repositories outside your network from those machines.
Moogsoft Onprem - Offline RPM pre-installation: If you have root access to the machine or machines on which you will install or upgrade Moogsoft Onprem, but you cannot connect to Yum repositories outside your network from those machines.

Installation process pre-requisite

An experienced Linux RHEL System Administrator is required to perform the installation/upgrade. If help is needed, please contact Moogsoft Support in order to engage Moogsoft Professional Services

Install Moogsoft Onprem

To complete an RPM installation of Moogsoft Onprem, perform the following steps:

Download and install the Moogsoft Onprem RPM packages, using one of the following methods according to your deployment type:

If you are performing an RPM installation:

VERSION=9.1.0; yum -y install moogsoft-server-${VERSION} \
moogsoft-db-${VERSION} \
moogsoft-utils-${VERSION} \
moogsoft-search-${VERSION} \
moogsoft-ui-${VERSION} \
moogsoft-common-${VERSION} \
moogsoft-mooms-${VERSION} \
moogsoft-integrations-${VERSION} \
moogsoft-integrations-ui-${VERSION}

If you are performing an offline RPM installation, navigate to the location where you copied the RPM files and install them:
```
yum install *.rpm
```

Edit your ~/.bashrc file to contain the following lines:

export MOOGSOFT_HOME=/usr/share/moogsoft
export APPSERVER_HOME=/usr/share/apache-tomcat
export JAVA_HOME=/usr/java/latest
export PATH=$PATH:$MOOGSOFT_HOME/bin:$MOOGSOFT_HOME/bin/utils

Source the ~/.bashrc file:
```
source ~/.bashrc
```
Run the Percona install script:
```
bash install_percona_nodes.sh;
```
The script guides you through the installation process. To configure a single database node on the same server as Moogsoft Onprem, use these settings:
- Configure Percona as "Primary".
- Do not set the server to "DB only".
- Set the first database node IP address to the server IP address.
- When prompted to enter the IP addresses of the second and third nodes, press Enter to skip these settings.

Initialize Moogsoft Onprem

When the installation process is complete, initialize Moogsoft Onprem as follows:

Run the initialization script moog_init, replacing <zone name> with your desired RabbitMQ VHOST:
```
$MOOGSOFT_HOME/bin/utils/moog_init.sh -I <zone_name> -u root
```
The script prompts you to accept the End User License Agreement (EULA) and guides you through the initialization process.
When asked if you want to change the configuration hostname, type "yes" and enter the public URL for the server. The public URL is the URL the instance will be connected to through a browser.
Note
When prompted for a password, enter the password for the root database user (not the UNIX system user). If you are installing Percona on this machine for the first time, leave the password blank and press Enter to continue.
The zone_name sets up a virtual host for the Message Bus. If you have multiple systems sharing the same bus, set a different zone name for each.

If you are deploying more than one database, configure HA Proxy to load-balance the database nodes. The following script requires root privileges. Run this script on any host running any Moogsoft Onprem components. Provide your "speedy" Yum repo user credentials when prompted:

cat > aiops_repo.sh << _EOF_
#!/bin/bash
clear
echo "Please provide access credentials for the 'speedy' yum repository in order to run the haproxy setup script"
echo
read -p "AIOps Repository Username: " AIOPS_USER
export AIOPS_USER
read -p "AIOps Repository Password: " -s AIOPS_PASS
export AIOPS_PASS
echo
bash <(curl -s -k https://\$AIOPS_USER:\$AIOPS_PASS@speedy.moogsoft.com/v9/haproxy_installer.sh)
_EOF_
bash aiops_repo.sh

Restart Moogfarmd:
```
service moogfarmd restart
```

Configure OpenSearch heap size

The minimum and maximum JVM heap sizes must be large enough to ensure that OpenSearch starts.

To set the minimum and maximum JVM heap sizes:

For RPM, edit the /etc/opensearch/jvm.options.d/moog.options file.
For Tarball, edit the $MOOGSOFT_HOME/cots/opensearch/jvm.options.d/moog.options file.

These heap sizes must be the same value. For example, to set the heap to 4 GB:

# Xms represents the initial size of total heap space
# Xmx represents the maximum size of total heap space

-Xms4g
-Xmx4g

If you change the heap size, you must restart OpenSearch:

For RPM, run service opensearch restart.
For Tarball, run $MOOGSOFT_HOME/bin/utils/process_cntl opensearch restart.

Disable the enhanced Content Security Policy (optional)

Moogsoft has provided an optional enhanced Content Security Policy (CSP) as part of this release. CSP is a security standard introduced to prevent Cross Site Scripting (XSS) and other data injection attacks. For more information, see the Mozilla document on Content Security Policy.

The CSP is controlled by Nginx and is enabled by default. To disable it:

Edit the following file:
```
/etc/nginx/conf.d/moog-ui-headers.conf
```
Comment the line that starts with add_header Content-Security-Policy and save the file.
Restart Nginx:
```
service nginx reload
```

Note

With enhanced CSP enabled, you must follow the steps below to allow access to external domains. If you want to access the UI with the Safari web browser, you must follow the steps below to configure Moogsoft Onprem for use with Safari.

Allow access to external domains

If you enable the enhanced CSP, the following features require additional configuration to allow access to external domains:

Situation Room plugins to external domains
Situation client tools to external URLs

To allow access to required external domains:

Edit the following file:
```
/etc/nginx/conf.d/moog-ui-headers.conf
```

Add a frame-src directive to the Content-Security-Policy header for the required domain. For example, run the following command to allow Google domains:

sed -i "s/add_header Content-Security-Policy\(.*\)\" always/add_header Content-Security-Policy\1; frame-src 'self' *.google.com\" always/" /etc/nginx/conf.d/moog-ui-headers.conf

Restart Nginx:
```
service nginx reload
```

Note

Moogsoft Onprem allows access to Pendo and WalkMe domains by default.

Configure Moogsoft Onprem for use with Safari

Due to a known issue in the Safari web browser, you must take additional steps if you've enabled the enhanced CSP and you want to access the UI with Safari:

Edit the following file:
```
/etc/nginx/conf.d/moog-ui-headers.conf
```
Add the following websocket URLs to the Content-Security-Policy section of the file. Substitute your hostname for <webhost>:
```
wss://<webhost>/moogpoller/ws
wss://<webhost>/integrations/ws/v1
```
You can update the configuration using a command similar to the following. Substitute your hostname for <webhost>:
```
sed -i.bak "s;connect-src 'self' app;connect-src 'self' wss://<webhost>/moogpoller/ws wss://<webhost>/integrations/ws/v1 app;g" /etc/nginx/conf.d/moog-ui-headers.conf
```
Restart Nginx:
```
service nginx reload
```

Important

Enabling the "latency performance" RHEL profile is strongly recommended. This profile allows RabbitMQ to operate much more efficiently so that throughput is increased and smoothed out.

For more information on performance profiles, see https://access.redhat.com/documentation/en-us/red_hat_enterprise_linux/8/html/monitoring_and_managing_system_status_and_performance/getting-started-with-tuned_monitoring-and-managing-system-status-and-performance

Enable the profile by running the following command as root:

tuned-adm profile latency-performance

This setting will survive machine restarts and only needs to be set once.

Verify the installation

Optional - Disable the yum repository

To prevent the Moogsoft Onprem packages from being upgraded when a system-level 'yum upgrade' command is run, it is recommended to disable the relevant yum repository. The following command assumes the Moogsoft repo file name is moogsoft.repo:

sed -i 's/enabled.*/enabled=0/' /etc/yum.repos.d/moogsoft-v9.repo

Change passwords for default users

Install Moogsoft Add-Ons

Moogsoft periodically releases add-ons to extend and enhance the core Moogsoft Onprem functionality. For example, new Workflow Engine functions, new Workflow Engines, or Integrations tiles. All add-ons releases are cumulative and include the fixes from previous releases.

Once you have finished upgrading or installing Moogsoft Onprem, you should install the Moogsoft Onprem add-ons to ensure you have the latest version.

See Install Moogsoft Add-ons for more information on how to install the Moogsoft Onprem add-ons.Install Moogsoft Add-ons

In this section:

RPM Installation

Before you begin

Installation process pre-requisite

Install Moogsoft Onprem

Initialize Moogsoft Onprem

Note

Configure OpenSearch heap size

Disable the enhanced Content Security Policy (optional)

Note

Allow access to external domains

Note

Configure Moogsoft Onprem for use with Safari

Important

Verify the installation

Optional - Disable the yum repository

Change passwords for default users

Install Moogsoft Add-Ons

Search results