This shows you the differences between two versions of the page.
Both sides previous revision Previous revision Next revision | Previous revision | ||
deploy:ibm_bigfix_install [2021/12/27 15:06] manu |
deploy:ibm_bigfix_install [2023/12/11 13:12] (current) manu [Linux] |
||
---|---|---|---|
Line 3: | Line 3: | ||
IBM Bigfix also known as TEM (Tivoli EndPoint Manager), IEM (IBM EndPoint Manager) | IBM Bigfix also known as TEM (Tivoli EndPoint Manager), IEM (IBM EndPoint Manager) | ||
- | ===== BigFix installation ===== | + | ===== BigFix Server installation ===== |
First install Redhat (also supported on Windows) | First install Redhat (also supported on Windows) | ||
- | /var/opt/BESServer 20GB | + | /var/opt/BESServer 20GB |
- | /var/opt/BESWebReportsServer 3GB | + | /var/opt/BESWebReportsServer 3GB |
- | /home/db2inst1 30GB # DB2 home dir and DB | + | /home/db2inst1 30GB # DB2 home dir and DB |
- | /opt 2G | + | /opt 2GB |
- | /opt/ibm/LMT 2GB | + | /opt/ibm/LMT 2GB |
- | /opt/ibm/db2 4GB # DB2 bin | + | /opt/ibm/db2 4GB # DB2 bin |
- | /opt/BESWebUI 1GB | + | /opt/BESWebUI 1GB |
- | /backup 20GB | + | /backup 20GB |
+ | |||
+ | Ensure that on Red Hat Enterprise Linux 8.0 the libnsl.so.1 and libstdc++.so.6 libraries are installed | ||
+ | |||
+ | <cli prompt='$'> | ||
+ | ilmtsrv:$ bigfix_backup.ksh | ||
+ | #!/usr/bin/ksh | ||
+ | #================================================================================== | ||
+ | # | ||
+ | # FILE: bigfix_backup.ksh | ||
+ | # | ||
+ | # PURPOSE: Backup BigFix + ILMT Server | ||
+ | # | ||
+ | # AUTHOR: | ||
+ | # | ||
+ | # PARAMETERS: | ||
+ | # | ||
+ | # SAMPLES: | ||
+ | # | ||
+ | #================================================================================== | ||
+ | |||
+ | backup_bigfix() | ||
+ | { | ||
+ | echo "**********************************" | ||
+ | echo "***** Stopping BigFix Server *****" | ||
+ | echo "**********************************" | ||
+ | date '+%Y-%m-%d %H:%M:%S' | ||
+ | /etc/init.d/LMTserver stop | ||
+ | /etc/init.d/besfilldb stop | ||
+ | /etc/init.d/besgatherdb stop | ||
+ | /etc/init.d/besserver stop | ||
+ | /etc/init.d/beswebreports stop | ||
+ | /etc/init.d/besclient stop | ||
+ | echo "**********************************" | ||
+ | echo "***** Removing old backups *****" | ||
+ | echo "**********************************" | ||
+ | date '+%Y-%m-%d %H:%M:%S' | ||
+ | rm -f /backup/BFENT* | ||
+ | rm -f /backup/BESREPOR* | ||
+ | rm -f /backup/TEMADB* | ||
+ | echo "**********************************" | ||
+ | echo "***** Backup DB2 to disk *****" | ||
+ | echo "**********************************" | ||
+ | date '+%Y-%m-%d %H:%M:%S' | ||
+ | /usr/sbin/runuser -l db2inst1 -c "db2 backup db BFENT to /backup" | ||
+ | /usr/sbin/runuser -l db2inst1 -c "db2 backup db BESREPOR to /backup" | ||
+ | /usr/sbin/runuser -l db2inst1 -c "db2 backup db TEMADB to /backup" | ||
+ | echo "**********************************" | ||
+ | echo "***** Backup to disk *****" | ||
+ | echo "**********************************" | ||
+ | date '+%Y-%m-%d %H:%M:%S' | ||
+ | tar cvf /backup/BESClient.tar /var/opt/BESClient | ||
+ | tar cvf /backup/BESServer.tar /var/opt/BESServer | ||
+ | tar cvf /backup/BESWebReportsServer.tar /var/opt/BESWebReportsServer | ||
+ | tar cvf /backup/misc.tar /etc/opt/BESServer/actionsite.afxm /var/.com.zerog.registry.xml | ||
+ | tar cvf /backup/LMT.tar /opt/ibm/LMT | ||
+ | echo "**********************************" | ||
+ | echo "***** Startting BigFix Server ****" | ||
+ | echo "**********************************" | ||
+ | date '+%Y-%m-%d %H:%M:%S' | ||
+ | /etc/init.d/besfilldb start | ||
+ | /etc/init.d/besgatherdb start | ||
+ | /etc/init.d/besserver start | ||
+ | /etc/init.d/beswebreports start | ||
+ | /etc/init.d/besclient start | ||
+ | /etc/init.d/LMTserver start | ||
+ | date '+%Y-%m-%d %H:%M:%S' | ||
+ | } | ||
+ | |||
+ | ################# | ||
+ | # Main | ||
+ | ################# | ||
+ | backup_bigfix > /tmp/backup.log 2>&1 | ||
+ | </cli> | ||
+ | |||
+ | ===== BigFix Client installation ===== | ||
+ | |||
+ | Download BESClient from | ||
+ | http://support.bigfix.com/bes/release/ | ||
+ | |||
+ | ==== Linux ==== | ||
+ | |||
+ | Space used on filesystems | ||
+ | /opt/BESClient 200MB | ||
+ | /var/opt/BESClient 200MB or more | ||
+ | /var/opt/BESCommon 50MB | ||
+ | /var/opt/BESRelay 30GB | ||
+ | |||
+ | Get the **masterhead** file from BigFix server: | ||
+ | wget --no-check-certificate -O /etc/opt/BESClient/actionsite.afxm https://<server_ip>:52311/masthead/masthead.afxm | ||
+ | Or | ||
+ | |||
+ | On the server the **masthead.afxm** file location: /var/opt/BESClientDeployTool/BigFixInstallSource/ClientInstaller/masthead.afxm | ||
+ | |||
+ | Copy the server file **masthead.afxm** to the client created folder **/etc/opt/BESClient** and rename it as ** actionsite.afxm** | ||
+ | |||
+ | Then install the client: | ||
+ | rpm --nosignature -Uhv BESAgent.rpm | ||
+ | (same version as server) and start the service | ||
+ | /etc/rc.d/init.d/besclient start | ||
+ | |||
+ | You 'll find the installation logs into the folder | ||
+ | /var/opt/BESClient/__BESData/__Global/Logs/ | ||
+ | |||
+ | ==== Windows ==== | ||
+ | |||
+ | Download the BigFix package and extract it. Put in the same folder the file named **masthead.afxm**, and install the client package, the masthead file 'll be automatically loader | ||
+ | |||
+ | Installation path is : **"C:\Program Files(x86)\BigFix Entreprise\BES Client\"** | ||
===== CLI ===== | ===== CLI ===== | ||
Line 202: | Line 310: | ||
# Detail info about a computer | # Detail info about a computer | ||
https://<bigfix_server>:52311/api/computer/4194896 | https://<bigfix_server>:52311/api/computer/4194896 | ||
+ | | ||
+ | ===== Change IP or hostname of the Bigfix server ===== | ||
+ | |||
+ | ==== Change IP of the Bigfix server ==== | ||
+ | |||
+ | If you relocate the server to a different IP address but the name in the Masthead remains the same then you should have no issues other than you will have endpoints whose DNS caching will have the older address. The issue could be mitigated by upper level relays as they would be the only ones contacting the server directly so you could manually clear their DNS caches. Console users would also need to shut down and restart. |