# Ercole + ercole-web + nginx common setup istructions

# Requirements

# Minimal default required network/firewall rules

It's highly recommended to also add network/firewall rules for downloading artifacts from github.com.

# Instructions

This installation guide is for RHEL8, but the steps can be easily adapted for RHEL7 .

Add yum repositories with ercole RPMs

• curl https://repository.ercole.io/shared/ercole-rhel8-x86_64.repo | tee /etc/yum.repos.d/ercole-x86_64.repo
• curl https://repository.ercole.io/shared/ercole-rhel8-noarch.repo | tee /etc/yum.repos.d/ercole-noarch.repo Install the required packages
• yum install ercole ercole-web nginx
• Configure nginx by overwriting the file /etc/nginx/nginx.conf to something like:

# For more information on configuration, see:
#   * Official English Documentation: http://nginx.org/en/docs/
#   * Official Russian Documentation: http://nginx.org/ru/docs/

user nginx;
worker_processes auto;
error_log /var/log/nginx/error.log;
pid /run/nginx.pid;

# Load dynamic modules. See /usr/share/doc/nginx/README.dynamic.
include /usr/share/nginx/modules/*.conf;

events {
    worker_connections 1024;
}

http {
    log_format  main  '$remote_addr - $remote_user [$time_local] "$request" '
                      '$status $body_bytes_sent "$http_referer" '
                      '"$http_user_agent" "$http_x_forwarded_for"';

    access_log  /var/log/nginx/access.log  main;

    sendfile            on;
    tcp_nopush          on;
    tcp_nodelay         on;
    keepalive_timeout   65;
    types_hash_max_size 2048;

    include             /etc/nginx/mime.types;
    default_type        application/octet-stream;

    # Load modular configuration files from the /etc/nginx/conf.d directory.
    # See http://nginx.org/en/docs/ngx_core_module.html#include
    # for more information.
    include /etc/nginx/conf.d/*.conf;

    server {
        listen       80 default_server;
        listen       [::]:80 default_server;
        server_name  _;
        root         /usr/share/ercole/web;

        # Load configuration files for the default server block.
        include /etc/nginx/default.d/*.conf;

        location /data/ {
            proxy_pass http://127.0.0.1:11111/;
        }

        location /api/ {
            proxy_pass http://127.0.0.1:11113/;
        }

        location /repo/ {
            proxy_pass http://127.0.0.1:11114/;
        }

        location /chart/ {
            proxy_pass http://127.0.0.1:11116/;
        }


        error_page 404 /404.html;
            location = /40x.html {
        }

        error_page 500 502 503 504 /50x.html;
            location = /50x.html {
        }
    }


    # Settings for a TLS enabled server.
    #
    server {
        listen       443 ssl http2 default_server;
        listen       [::]:443 ssl http2 default_server;
        server_name  _;

        ssl_certificate "/etc/pki/nginx/server.crt";
        ssl_certificate_key "/etc/pki/nginx/private/server.key";
        ssl_session_cache shared:SSL:1m;
        ssl_session_timeout  10m;
        ssl_ciphers PROFILE=SYSTEM;
        ssl_prefer_server_ciphers on;

        root         /usr/share/ercole/web;

        # Load configuration files for the default server block.
        include /etc/nginx/default.d/*.conf;

        location /data/ {
            proxy_pass http://127.0.0.1:11111/;
        }

        location /api/ {
            proxy_pass http://127.0.0.1:11113/;
        }

        location /repo/ {
            proxy_pass http://127.0.0.1:11114/;
        }

        location /chart/ {
            proxy_pass http://127.0.0.1:11116/;
        }

        error_page 404 /404.html;
            location = /40x.html {
        }

        error_page 500 502 503 504 /50x.html;
            location = /50x.html {
       }
    }
}

• mkdir -p /etc/pki/nginx/private
• openssl req -nodes -x509 -newkey rsa:4096 -keyout /etc/pki/nginx/private/server.key -out /etc/pki/nginx/server.crt.
• Add the following lines to /etc/ercole/conf.d/20-ercolesetup.toml:

# FE.APIService.RemoteEndpoint = "https://<myip>/api"
# FE.ChartService.RemoteEndpoint = "https://<myip>/chart"

• If your machine has multiple IP addresses, check and fix endpoints in /etc/ercole/conf.d/20-ercolesetup.toml.
• If you want change the URI used to connect to mongodb, run the command echo 'Mongodb.URI = "mongodb://user:pass@ip:port/ercole"' > /etc/ercole/conf.d/40-mongoconf.toml with the right Mongo URI.
• Review ercole configuration with ercole show-config
• If you have changed ercole configuration, run the command ercole-setup
• systemctl start ercole
• systemctl start enable nginx
• systemctl start nginx

# Troubleshooting

# Failed (13: Permission denied) while connecting to upstream in /var/log/nginx/error.log

If curl https://127.0.0.1/repo/ping.txt doesn't return PONG! but returns nginx's 404 page and /var/log/nginx/error.log contains lines like

2020/08/03 09:25:01 [crit] 77642#0: *16 connect() to 127.0.0.1:11111 failed (13: Permission denied) while connecting to upstream, client: 127.0.0.1, server: _, request: "GET /data/ping HTTP/1.1", upstream: "http://127.0.0.1:11111/ping", host: "127.0.0.1"

Execute the command setsebool -P httpd_can_network_connect 1. https://stackoverflow.com/questions/23948527/13-permission-denied-while-connecting-to-upstreamnginx

# Ercole

Ercole is the backend component of ercole.io project.

# Requirements

# Minimal default required network/firewall rules

[1] It is highly recommended to setup a reverse proxy between users/agents and ercole for avoiding to comunicate directly to the microservices using HTTP and opening too much ports, using for example nginx. See the istructions below.

# Suggested network/firewall rules

[1] You can safely separate ercole-reposervice from the others microservices.

# Installation guide

This installation guide is for RHEL8, but the steps can be easily adapted for RHEL7 .

• curl https://repository.ercole.io/shared/ercole-rhel8-x86_64.repo | tee /etc/yum.repos.d/ercole-x86_64.repo
• yum install ercole
• If your machine has multiple IP addresses, check and fix endpoints in /etc/ercole/conf.d/20-ercolesetup.toml
• Review ercole configuration with ercole show-config
• systemctl start ercole

Ercole is configured automatically during the installation but you can edit the configuration by creating/files in /etc/ercole/conf.d. Its logs can be read with the command journalctl -u ercole-dataservice -u ercole-alertservice -u ercole-apiservice -u ercole-reposervice -u ercole-chartservice and can be updated as usually with a simple yum update unless in the new versions were introduced breaking changes. It is also recommeded to also install jq. After the installation you may want to install ercole-web and configure nginx or to install artifacts.

# Ercole configuration

The configuration is written in TOML syntax and it is stored in these files/directory in ascending order of priority. The properties specified in low priority configuration files are overriden by the values in high priority configuration files. The configurations files are:

• /opt/ercole/config.toml (legacy config file)
• /usr/share/ercole/config.toml (distributor config file)
• /etc/ercole/ercole.toml
• /etc/ercole/conf.d/*.toml
  • /etc/ercole/conf.d/20-ercolesetup.toml is a file created by ercole-setup utility that contains known host specific configuration like remote endpoints, paths to certificates/keys and inter microservice configuration params.
• ~/.config/ercole.toml
• ./config.toml
• An optional file specified to the ercole using the -c option.

It's highly recommended to configure it by creating files in /etc/ercole/conf.d (e.g /etc/ercole/conf.d/50-myconf.toml). If you change the RemoteEndpoints of the microservices you may need to re-run ercole-setup(or ercoleweb-setup if you have installed ercole-web).

# (main) Configuration properties list

# Mongodb.*

• Mongodb.URI is the uri used to connect to the mongodb database. The default value is mongodb://localhost:27017/ercole.
• Mongodb.DBName is the name of the mongodb database. The default value is ercole.
• Mongodb.Migrate contains true if ercole should update/migrate the database schema, otherwise false. The default value is true. When ercole is started, it try to update the structure of the database by updating the schemas, updating the documents, creating the indexes, inserting default values.

# DataService.*

• DataService.RemoteEndpoint contains the URI used by clients to connect to the dataservice.
• DataService.BindIP contains the IP Address on which data service listen.
• DataService.Port contains the port on which data service listen.
• DataService.LogHTTPRequest enable the logging of the http request.
• DataService.LogInsertingHostdata enable the logging of the inserting hostdata.
• DataService.LogDataPatching enable the logging of data patching events.
• DataService.EnablePatching enable the patching of hostdata. It's required for tagging the hosts and modifying Oracle Database license count values.
• DataService.AgentUsername contains the username used to authenticate agents
• DataService.AgentPassword contains the password used to authenticate agents
• DataService.CurrentHostCleaningJob.Crontab contains the cron schedule expression for automatic archivial of the current (non archived).
• DataService.CurrentHostCleaningJob.HourThreshold contains the maximium number of hours in which a hostdata is considered up to date. After this threshold the host will be archived by the CurrentHostCleaningJob.
• DataService.CurrentHostCleaningJob.RunAtStartup enable the running of the current host cleaning job at startup.
• DataService.ArchivedHostCleaningJob.Crontab contains the cron schedule expression for automatic deletion of archived hosts.
• DataService.ArchivedHostCleaningJob.HourThreshold contains the maximium number of hours in which a archived hostdata is retained. After this threshold the archived host will be deleted by the ArchivedHostCleaningJob.
• DataService.ArchivedHostCleaningJob.RunAtStartup enable the running of the archived host cleaning job at startup.

# AlertService.*

• AlertService.RemoteEndpoint contains the URI used by the microservices to connect to the alertservice.
• AlertService.BindIP contains the IP Address on which alert service listen.
• AlertService.Port contains the port on which alert service listen.
• AlertService.LogHTTPRequest enable the logging of the http request.
• AlertService.LogMessages enable the logging of the processing queue messages.
• AlertService.LogAlertThrows enable the logging of throwing alerts.
• AlertService.PublisherUsername contains the username used to authenticate the microservices.
• AlertService.PublisherPassword contains the password used to authenticate the microservices.
• AlertService.FreshnessCheckJob.Crontab contains the cron schedule expression for automatic throws of NO_DATA alerts when a current host is not up to date.
• AlertService.FreshnessCheckJob.HourThreshold contains the maximium number of hours in which a hostdata is considered up to date. After this threshold a NO_DATA alert is thrown by the FreshnessCheckJob.
• AlertService.FreshnessCheckJob.RunAtStartup enable the running of the freshness check job at startup.
• AlertService.Emailer.Enabled enable the notifying of the alerts by email.
• AlertService.Emailer.From the source email address that is used to send emails.
• AlertService.Emailer.To the destination email addresses to which are sent the emails.
• AlertService.Emailer.SMTPServer SMTP server used to send email.
• AlertService.Emailer.SMTPPort port of the SMTP server used to send email.
• AlertService.Emailer.SMTPUsername username used to authenticate to the SMTP server.
• AlertService.Emailer.SMTPPassword password used to authenticate to the SMTP server.
• AlertService.Emailer.DisableSSLCertificateValidation true if disable the authentication of the SMTP server.

# APIService.*

• APIService.RemoteEndpoint contains the URI used by the clients to connect to the apiservice.
• APIService.BindIP contains the IP Address on which api service listen.
• APIService.Port contains the port on which api service listen.
• APIService.LogHTTPRequest enable the logging of the http request.
• APIService.ReadOnly disable the APIs that modify the data
• APIService.EnableInsertingCustomPatchingFunction enable the possibility to add/set a custom patching function.
• APIService.DebugOracleDatabaseAgreementsAssignmentAlgorithm enable the verbosity of the assignment algorithm used to distribuite oracle database agreement licenses.
• APIService.AuthenticationProvider.Type contains the authentication type. The allowed values are basic and ldap.
• APIService.AuthenticationProvider.Username contains the username used to authenticate user when Type is basic. It also contains the username used by ercole to perform requests to APIService.
• APIService.AuthenticationProvider.Password contains the password used to authenticate password when Type is basic. It also contains the password used by ercole to perform requests to APIService.
• APIService.AuthenticationProvider.Username contains the username used to authenticate user when Type is basic. It also contains the username used by ercole to perform requests to APIService.
• APIService.AuthenticationProvider.Password contains the password used to authenticate password when Type is basic. It also contains the password used by ercole to perform requests to APIService.
• APIService.AuthenticationProvider.PrivateKey contains the key used to sign the authentication JWT tokens.
• APIService.AuthenticationProvider.PublicKey contains the key used to validate the authentication JWT tokens.
• APIService.AuthenticationProvider.TokenValidityTimeout contains the maximum number of seconds on which the token is considered valid.
• APIService.AuthenticationProvider.Host, when Type is ldap, contains the server used to authenticate the users.
• APIService.AuthenticationProvider.Port, when Type is ldap, contains the port used to connect to the LDAP server. e.g. 389.
• APIService.AuthenticationProvider.LDAPBase, when Type is ldap, contains the LDAP base of the realm. e.g. dc=planetexpress,dc=com.
• APIService.AuthenticationProvider.LDAPUseSSL, when Type is ldap, enable/disable SSL for connecting to the server.
• APIService.AuthenticationProvider.LDAPBindDN, when Type is ldap, contains the account used to authenticate to the LDAP server. e.g. cn=admin,dc=planetexpress,dc=com.
• APIService.AuthenticationProvider.LDAPBindPassword, when Type is ldap, contains the password account used to authenticate to the LDAP server. e.g. GoodNewsEveryone.
• APIService.AuthenticationProvider.LDAPUserFilter, when Type is ldap, it's unknown the purpose of this field but put (uid=%s).
• APIService.AuthenticationProvider.LDAPGroupFilter, when Type is ldap, it's unknown the purpose of this field but put (memberUid=%s).
• APIService.OperatingSystemAggregationRules are the rules used to map OS names + Version to product.

# RepoService.*

• RepoService.UpstreamRepositories contains the upstream repository from which the artifacts are downloaded.
  • Name contains the name of the repository.
  • Type contains the type of the repository. The allowed values are github-release, directory, ercole-reposervice.
  • URL contains the URL used to find the files. In the case of github-release it should the URL of the API that return the releases list. e.g https://api.github.com/repos/ercole-io/ercole-agent/releases. In the case of directory it should be the directory in which the artifacts are contained. In the case of ercole-reposervice it should be the url of a directory that contains the directory all and the file index.json.
• RepoService.HTTP.Enable contains true if reposervice should serve the files via HTTP.
• RepoService.HTTP.RemoteEndpoint contains the url used by clients to reach the repository via HTTP.
• RepoService.HTTP.BindIP contains the IP on which reposervice listen for HTTP requests.
• RepoService.HTTP.Port contains the port on which reposervice listen for HTTP requests.
• RepoService.HTTP.LogHTTPRequest true if reposervice should log for every received HTTP request.
• RepoService.SFTP.Enable contains true if reposervice should serve the files via SFTP.
• RepoService.SFTP.RemoteEndpoint contains the url used by clients to reach the repository via SFTP.
• RepoService.SFTP.BindIP contains the IP on which reposervice listen for SFTP.
• RepoService.SFTP.Port contains the port on which reposervice listen for SFTP.
• RepoService.SFTP.PrivateKey contains the private key used by the SFTP server.
• RepoService.SFTP.LogConnections true if reposervice should log the connections from SFTP clients.
• RepoService.SFTP.DebugConnections true if reposervice should log degug messages of the connections from SFTP clients.

# ChartService.*

• ChartService.RemoteEndpoint contains the URI used by the clients to connect to the chartservice.
• ChartService.BindIP contains the IP Address on which chart service listen.
• ChartService.Port contains the port on which chart service listen.
• ChartService.LogHTTPRequest enable the logging of the http request.

# Notes about the internal repository

Ercole repository is tought to be public and visibile to everyone so it shouldn't contains private informations like the password or private keys. The main ercole repository is https://repository.ercole.io. It is served via HTTP and via SFTP so you can download files in various mode like:

• wget http://myawesomeercole2.local:11114/ping.txt
• curl http://myawesomeercole2.local:11114/ping.txt > /tmp/ping.txt
• sftp -P 11115 myawesomeercole2.local/ping.txt /tmp/ping.txt Some repository files/directory are managed using the ercole repo subcommands. Others files/directories can be safely modified.

Managed files: * ping.txt is a file used to check the liveness of the microservices. It's really managed but it's recommended to not modify it. * index.json contains the cached list of available artifacts. Can be safely removed for forcing the rebuild of the cache when the next repo subcommands is run. * all/ contains the symlinks to all installed (and managed) artifacts. * rhel/* contains the RPM repositories of the packages for every RHEL versions. * win/* contains various ercole-agent setup files for windows. * aix/ contains the RPM repositories of the packages for every AIX versions. * aix-tar-gz/ alternative artifacts of agents for AIX. * hpux/ contains the agents for HPUX.

Unmanaged known files: * shared/ contains various files like some .repo files. * snapshots/ is a directory present in https://repository.ercole.io that is used to store snapshots of all projects. The snapshots aren't tought to be used outside the development.

The public repository don't serve files via SFTP. It may be a good idea to create multiple ercole reposervice for directory for stable/testing/unstable or PRD/COL/TST.

# (main) ercole usage

Ercole is a command line tool so it can be used to perform some.

• ercole version print the version of ecole.
• ercole show-config show the ercole's actual configuration.
• ercole fire-hostdata send a hostdata stored in a json file or from a stdin to ercole-dataservice.
• ercole migrate migrate the structure of the mongodb database from a previous one to the latest.
• ercole serve start the services. Every microservices can be turned on/off esplicitily using the various --enable options like --enable-dataservice.
• ercole api is a group of subcommands used to perform request data from ercole-apiservice.
• ercole chart is a group of subcommands used to perform request data from ercole-chartservice.
• ercole repo is a group of subcommands used to manage the repository. Can accept the command --rebuild-cache to force the rebuild of the cache stored in /var/lib/ercole/distributed_directory/index.json.
  • ... list lists the artifacts detected in the upstream repositories.
  • ... info get the informations about the specified artifacts.
  • ... install download and install the specified artifacts.
  • ... remove uninstall the specified artifacts.
  • ... update try to find newer version of all installed artifacts and install them.

# Various HOWTO/examples

# How to install a artifact

• The first thing to do is to find the available artifacts by running the command: ercole repo list
• Choose the artifact you want.
• Install it with for example with the command: ercole repo install ercole-agent/ercole-agent-rhel7@1.5.0

# Install a package to rhelX from the ercole-reposervice

The first thing to do is to create a repository file .

• curl https://repository.ercole.io/shared/ercole-rhel7-x86_64.repo | tee /etc/yum.repos.d/ercole.repo

The next thing is to install the package with yum or dnf.

• yum install ercole-agent

# Ercole-web

Ercole-web is the official optional frontend of the ercole.io project

# Requirements

# Installation guide

This installation guide is for RHEL8, but the steps can be easily adapted for RHEL7.

• curl https://repository.ercole.io/shared/ercole-rhel8-noarch.repo | tee /etc/yum.repos.d/ercole-noarch.repo
• yum install ercole-web The website files can be found under /usr/share/ercole/web/. If you want setup nginx for serving the files and proxy-pass you can follow this HOWTO.

# Configuration

Ercole-web has a single file and it's stored in /usr/share/ercole/web/config.json. The file isn't tought to be modified by hand but it's generated by ercoleweb-setup util using the values inside the file /etc/ercole/conf.d/20-ercolesetup.toml.

# Ercole-agent and ercole-agent-perl

Ercole-agent and ercole-agent-perl are the data collectors that fetches some informations from various sources like the host and the software. Organize them in a JSON structure called hostdata and send them to the dataservice.

# Differences

There are two different variant of ercole-agent: ercole-agent (go) and ercole-agent-perl. Their main differences are the programming language, operating system support and feature/targets support. It's advised to stick to ercole-agent (go)

[1] It's packaged only for RHEL5, RHEL6, RHEL7, RHEL8.

[2] It isn't already properly packaged.

# Ercole-agent (go)

# RHELx installation

The installations instructions are written for RHEL8, but they are also applicable to older RHEL versions.

1. curl https://repository.ercole.io/shared/ercole-rhel8-x86_64.repo | tee /etc/yum.repos.d/ercole-x86_64.repo
2. yum install ercole-agent

# Windows installation

On windows it's required to have powershell >= 2.

1. Download the correct file from https://repository.ercole.io/win/win/x86_64/.
2. Click to the setup and follow the installation wizard. At the moment the customization of installation directory doesn't work correctly: it must be installed in C:\ErcoleAgent (see issue #186 and issue #54).

# Operating system level differences

[1] Except when Virtualization feature is enabled

# Configuration

Ercole-agent can be configured modifying the content of the config.json stored in /opt/ercole-agent/config.json (Linux) or C:\ercoleAgent\config.json (Windows). The configuration properties are:

• Hostname: If the value is default, the hostname used to identifying the agents is the hostname of the host, otherwise it's the value of the Hostname property. The default value is default.
• Environment: It's the environment of the machine. e.g TST, PRD, DEV, COLL, ...
• Location: It's the physical location of the host. e.g Italy, Germany, France, ...
• DataserviceURL: It's the base URL of ercole-dataservice to which are sent the hostdatas.
• AgentUser: It's the username used by agent to be authenticated by ercole-dataservice.
• AgentPassword: It's the password used by agent to be authenticated by ercole-dataservice.
• EnableServerValidation: True if ercole-agent should validate ercole-dataservice https certificate.
• ForcePwshVersion: Use a specific version of powershell. Used only on windows.
• Period: Is the number of hour between different runs.
• Verbose: Add more verbosity to agent .
• ParallelizeRequests: True if ercole-agent should run the fetchers in parallel. Otherwise false.
• Features: Contains specific configuration of the targets/features.

# Virtualization target

# Requirements

# VMWare/VMWare:

• PowerShell(pwsh) version >= 2
• VSphere power CLI module
• Access to vSphere via the 443 port
• Read only user access to vSphere
• PowerCLI is configured with the following command. Set-PowerCLIConfiguration -Scope User -ParticipateInCEIP $false -InvalidCertificateAction ignore

# Oracle/VM

• ovm_vmcontrol installed on the ovm manager
• Key exchange with ovm manager user who can run ovm_vmcontrol
• VMs names must not contain spaces (they will be ignored)
• sshpass is installed
• ovmcli installed on ovmmanager (From version 3.2.1)
• Access ovmmanager via 10000 port

# Configuration (Features.Virtualization.*)

• Features.Virtualization.Enabled: true if Virtualization support should be enabled.
• Features.Virtualization.FetcherUser: name of the user that should be used for fetching the informations. If the value is empty, it's the user that is running the agent.
• Features.Virtualization.Hypervisors: list of the hypervisors from which the clusters/vms list is fetched.
• Features.Virtualization.Hypervisors.Type: contains the type of the hypervisors. Valid values are vmware, ovm.
• Features.Virtualization.Hypervisors.Endpoint: contains the endpoint of the hypervisor, e.g vSphere or ovmmanager ip address.
• Features.Virtualization.Hypervisors.Username: contains the username used to authenticate the agent.
• Features.Virtualization.Hypervisors.OvmUserKey: it's the user ID of the user on ovmmanger that have exchanged keys with the components.
• Features.Virtualization.Hypervisors.OvmControl: contains the /path/to/ovmcontrol.

# Oracle/Database target

# Requirements

• Oracle Database version >= 9i

# Configuration (Features.OracleDatabase.*)

• Features.OracleDatabase.Enabled: true if Oracle/Database support should be enabled.
• Features.OracleDatabase.FetcherUser: name of the user that should be used for fetching the informations. If the value is empty, it's the user that is running the agent.
• Features.OracleDatabase.Oratab: it's the /path/to/the/oratab, the file that contains the list of DBs
• Features.OracleDatabase.AWR: it's the number of Automatic workload repository
• Features.OracleDatabase.Forcestats: true if enable the running of fetch/stats fetcher

# Oracle/Exadata target

# Requirements

The exadata component should not be virtualized.

# Configuration (Features.OracleExadata.*)

• Features.OracleExadata.Enabled: true if Oracle/Exadata support should be enabled.
• Features.OracleExadata.FetcherUser: name of the user that should be used for fetching the informations. If the value is empty, it's the user that is running the agent. Root permissions are usually required.

# Microsoft/SQLServer target

# Requirements

• The service user need administration permissions to access to the instances (Trusted connection)
• TCP/IP protocol connections is enabled on the instances
• ercole-agent service need to have a setted user

# Configuration (Features.MicrosoftSQLServer.*)

• Features.MicrosoftSQLServer.Enabled: true if Microsoft/SQLServer support should be enabled.
• Features.MicrosoftSQLServer.FetcherUser: name of the user that should be used for fetching the informations. If the value is empty, it's the user that is running the agent. It's useless...

# Ercole-agent-perl

# Requirements

• perl >= 5.8.8
• Oracle Database version >= 9i

# Solaris installation

1. Download the agent from the repository
2. cd /
3. tar xvf /path/to/ercole-agent-perl-<version>-1.solaris11.noarch.tar.gz
4. svcadm restart manifest-import
5. svcadm enable ercole-agent-perl

# Maintenance

• The service can be restarted with svcadm restart ercole-agent-perl.
• The log can be usually found in /var/svc/log/ercole-agent-perl:default.log.
• The state can be queried with svcs -x ercole-agent-perl

# AIX installation

1. Download the agent from the repository
2. useradd -g dba -d /home/ercole-agent -m -s /bin/bash -c "Ercole agent user" ercole
3. touch /var/log/ercole-agent-perl.log
4. chown ercole /var/log/ercole-agent-perl.log
5. rpm -ivh ercole-agent-perl-<version>-1.aix6.1.noarch.rpm
6. /etc/rc.d/init.d/ercole-agent-perl start

# Maintenance

• The service can be restarted with /etc/rc.d/init.d/ercole-agent-perl restart.
• The log can be usually found in /var/log/ercole-agent.log.
• The state can be queried with ps -ef | grep ercole-agent

# HPUX installation

1. Download the agent from the repository
2. cd /
3. tar xvf /path/to/ercole-agent-perl-<version>-1.hpux.noarch.tar.gz
4. useradd -g dba -d /home/ercole-agent -m -s /bin/bash -c "Ercole agent user" ercole
5. touch /var/adm/ercole-agent.log
6. chown ercole /var/adm/ercole-agent.log
7. /sbin/init.d/ercole-agent start

# Maintenance

• The service can be restarted with /sbin/init.d/ercole-agent restart.
• The log can be found in /var/adm/ercole-agent.log.
• The state can be queried with ps -ef | grep ercole-agent

# Configuration

Ercole-agent-perl can be configured modifying the content of the config.json stored in /opt/ercole-agent/config.json (Linux). The configuration properties are:

• hostname: If the value is default, the hostname used to identifying the agents is the hostname of the host, otherwise it's the value of the Hostname property. The default value is default.
• envtype: It's the environment of the machine. e.g TST, PRD, DEV, COLL, ...
• location: It's the physical location of the host. e.g Italy, Germany, France, ...
• serverurl: It's the base URL of ercole-dataservice to which are sent the hostdatas.
• serverusr: It's the username used by agent to be authenticated by ercole-dataservice.
• serverpsw: It's the password used by agent to be authenticated by ercole-dataservice.
• frequency: Is the number of hour between different runs.
• forcestats: True if the fetcher fetch/*/stats should be run
• EnableServerValidation: True if ercole-agent should validate ercole-dataservice https certificate.
• oratab: it's the /path/to/the/oratab, the file that contains the list of DBs
• AWR: it's the number of Automatic workload repository
• UseCurl: true if the agent should use curl to send the hostdata. Otherwise use the internal perl library. On solaris the internal library seems to not work.