Agent Installation
This document covers installation of the Agent. For more information on Agents and how they fit into the SIFF Platform refer to the Collectors & Agents section in Getting Started.
Download / Install
- Download the Windows installer: siffagent-latest.exe
- Run the installer to complete the installation.
Note: To add a repository and install packages sudo or root access is required.
Install via Package Repository
- For yum (rpm) based distributions:
- Download the appropriate repository file for your system. Refer to the SIFF Repositories table below.
- Install the repository file: copy the
.repofile to/etc/yum.repos.d/. - Update the packages: run
sudo yum update - Install the Agent package: run
sudo yum install siff-agent
- For apt (deb) based distributions:
- Install the SIFF repository signing key:
curl https://downloads.siff.io/repo/deb/repo/conf/siff.gpg.key | sudo apt-key add - - Download the appropriate repository file for your system. Refer to the SIFF Repositories table below.
- Install the repository file: copy the
.listfile to/etc/apt/sources.list.d/. - Update the packages: run
sudo apt-get update - Install the Agent package: run
sudo apt-get install siff-agent
- Install the SIFF repository signing key:
SIFF Repositories
| Distribution | Architecture | Type | Repository |
|---|---|---|---|
| RHEL 8 | x86_64 | yum | siff_rhel_8.repo |
| RHEL 7 | x86_64 | yum | siff_rhel_7.repo |
| RHEL 6 | x86_64 | yum | siff_rhel_6.repo |
| CentOS 8 | x86_64 | yum | siff_centos_8.repo |
| CentOS 7 | x86_64 | yum | siff_centos_7.repo |
| CentOS 6 | x86_64 | yum | siff_centos_6.repo |
| Amazon Linux, Amazon Linux 2 | x86_64 | yum | siff_amzn2.repo |
| Ubuntu LTS: 16.04, 18.04, 20.04, 22.04 | x86_64 | apt | siff.list |
Manual Installation
For systems that cannot access the package repository directly then the latest package can be downloaded and installed manually:
- Download the appropriate package for your system:
- .rpm (RedHat, CentOS, Amazon Linux): siff-agent-latest.x86_64.rpm
- .deb (Ubuntu): siff-agent.deb
- Copy the package to the target system
- Install the package:
- .rpm:
sudo rpm -Uvh siff-agent-latest.x86_64.rpm - .deb:
sudo dpkg -i siff-agent.deb
- .rpm:
Configure
The Agent must be configured to connect to a Collector. Since an environment may have multiple Collectors, then choose the most appropriate collector for the Agent to connect to.
-
- Linux/UNIX Collector:
/opt/siff/agent.yml - Windows Collector:
C:\Program Files\Siff\agent.yml
From the system running the appropriate Collector, obtain a copy of the following files:
and the Collector certificate required for secure communications:
- Linux/UNIX Collector:
/opt/siff/cert/collector.cert - Windows Collector:
C:\Program Files\Siff\cert\collector.cert
- Linux/UNIX Collector:
-
On the system running the Agent:
- Copy the
agent.ymlfile to:C:\Program Files\Siff\ - Copy the
collector.certfile to:C:\Program Files\Siff\cert\
- Copy the
- Restart the Agent service.
The Agent must be configured to connect to a Collector. Since an environment may have multiple Collectors, then choose the most appropriate collector for the Agent to connect to.
-
- Linux/UNIX Collector:
/opt/siff/agent.yml - Windows Collector:
C:\Program Files\Siff\agent.yml
From the system running the appropriate Collector, obtain a copy of the following files:
and the Collector certificate required for secure communications:
- Linux/UNIX Collector:
/opt/siff/cert/collector.cert - Windows Collector:
C:\Program Files\Siff\cert\collector.cert
- Linux/UNIX Collector:
-
On the system running the Agent (as root):
- Copy the
agent.ymlfile to:/opt/siff/ - Update file ownership:
chown siff:siff /opt/siff/agent.yml - Copy the
collector.certfile to:/opt/siff/cert/ - Update file ownership:
chown siff:siff /opt/siff/cert/collector.cert
- Copy the
- Restart the Agent service:
service siff-agent start