Installing Linux agent
On Linux, the agent gathers system and application logs and forwards them to a Unified Security Stack master server or probe/proxy. It also watches system activity and runs incident response commands. Unified Security Stack agents communicate through ports 9000 and 50051. Ensure that these ports are open.
Prerequisite:
Log forwarding requirement:
The Linux Agent relies on rsyslog to gather and send system and application logs to Unified Security Stack.
Ensure rsyslog has been installed and is active; otherwise, logs will not be delivered to Unified Security Stack.
1. Install or remove the Unified Security Stack agent based on your operating system:
The commands below contain sensitive information, so do not share them.
Copy agent installation commands for each operating system directly from your Unified Security Stack instance, under the Integrations section.
This guarantees that every token, identifier, and configuration parameter is correct and tailored to your environment.