Deploying the LFA or EIF on remote servers
To facilitate scalable data collection on multiple remote nodes, you can deploy instances of the Tivoli® Event Integration Facility (EIF) Receiver or the internal IBM® Tivoli Monitoring Log File Agent on remote servers.
Before you begin
Before you run the command, you must configure secure shell (SSH) communication between the local installation of IBM Operations Analytics Log Analysis and the remote host. For more information about how to do so, see Configuring secure shell (SSH) communication for multiple remote hosts.
About this task
- If you have a high rate of data ingestion on multiple data sources. For example, if you have 100 or more events per second and 20 or more data sources.
- If you require improved throughput performance on the remote server.
- If the hardware resources on the remote server are restrained.
- If you want to optimize performance according to the conditions described on the Performance developer works page here: https://www.ibm.com/developerworks/community/wikis/home?lang=en#!/wiki/IBM Log Analytics Beta/page/Performance and tuning
You can use the command to deploy up to 20 instances of the Tivoli Event Integration Facility Receiver or a single instance of the Log File Agent on a remote node. The command deploys and configures IBM Java™ 1.8. The command also configures the deployed Tivoli Event Integration Facility Receiver instance to communicate with the Data Collector client.
However, this command does not configure the Log File Agent subnode. You must configure this setting manually. Both the remote and local instance of the Log File Agent can monitor remote data sources. For more information about configuring Log File Agent, see Configuring the Log File Agent.
To ensure that the remote instances of the Tivoli Event Integration Facility work with the local Data Collector interface, you must create the remotely deployedTivoli Event Integration Facility or Log File Agent instances as part of the same installation. This is because the encryption configuration and signature generation is done during the main installation. If you install IBM Operations Analytics Log Analysis after you set up the remote nodes, you must install the remote Tivoli Event Integration Facility or Log File Agent instances again. However, you can remove remote instances of the Tivoli Event Integration Facility or Log File Agent without installing IBM Operations Analytics Log Analysis again.
If you use the script to install the remote instance on a server that uses the SUSE Linux® Enterprise Server 11 operating system, the script fails. For more information, see Cannot install remote EIF instance on SUSE.
The install.sh command is in the <HOME>/IBM/LogAnalysis/remote_install_tool/ directory on the local installation of IBM Operations Analytics Log Analysis. Use the install.sh command to install the Tivoli Event Integration Facility Receiver or the Log File Agent on a remote server.
Procedure
- Navigate to the <HOME>/IBM/LogAnalysis/remote_install_tool/ directory and run the install.sh command. You are prompted for a series of inputs.
- Enter the remote installation directory. This value must be the location where the deployed artifacts are installed on the remote host.
- If you want to deploy the Tivoli Event Integration Facility Receiver, select it. If you do, enter the Tivoli Event Integration Facility Receiver instances that you want to deploy.
- If you want to deploy the Log File Agent instance on the remote node, select it.
- If you want to use the configuration or format files in the <HOME>/IBM/LogAnalysis/IBM-LFA-6.30/config/lo directory for your remote Log File Agent instance, copy the files to the remote server.