Installing or upgrading Disconnected Log Collector on Ubuntu Linux

Install IBM Disconnected Log Collector on a computer or virtual machine (VM) that meets all the system requirements. You can install only one instance of Disconnected Log Collector per computer or VM.

Before you begin

  • To use the installation script, you must have Python on your operating system. By default, most operating systems include Python capabilities.
  • Ensure that all system requirements are met and that IBM® Semeru Runtime Certified Edition JDK, Version 11, 64-bit is installed. For more information about installing Java™, see Installing Java on Ubuntu Linux.

About this task

If you have a previous version of Disconnected Log Collector that is installed, upgrade the installation by installing the newer version over your existing installation. Your existing configuration is preserved when you upgrade.

Procedure

  1. Download the Disconnected Log Collector installer package from IBM Fix Central (ibm.com/support/fixcentral/).
    Enter dlc version (For example: v2.x.x) in the Search Fix Central field. The file name for the installer package is dlc-service-install-deb-<version>.tgz
  2. Unpack and run the Disconnected Log Collector installer package by running the following command:
    Tip: Click the Copy to clipboard icon at the upper right of your code block, then replace the <version> placeholder with the correct version number for the installable package and run the following command.
    tar -zxvf dlc-service-install-deb-<version>.tgz
    The Disconnected Log Collector installer package contains the following files:
    • install.sh
    • install.py
    • uninstall.sh
    • uninstall.py
    • dlc-service-debs-<version>.tgz
  3. Install the Disconnected Log Collector by running the following script:
    ./install.sh
    Tip: You can add the version that you want to install after the script name. If you don't add a version, the script prompts you to pick a version. If you have only one version of Disconnected Log Collector in your files, the script installs that version.
  4. After the installation is finished, run the following command to restart the Disconnected Log Collector service.
    systemctl restart dlc
    Note: In case you want to uninstall your Disconnected Log Collector instance, run the uninstall script using below command:
    ./uninstall.sh

Results

After the Disconnected Log Collector restarts, run the following command to check the system status.
systemctl status dlc
An active (running) message indicates that the installation was successful and that Disconnected Log Collector is running.
Note: By default, Disconnected Log Collector uses the User Datagram Protocol (UDP) to send log events. Any incoming events are sent only to the local computer because you must configure a connection to IBM QRadar.

What to do next

After you have install Disconnected Log Collector, you must open firewall ports to allow communication. For more information, see Opening required ports in the Linux firewall.