Alert Logic Log Manager for Rackspace Public Cloud (Windows agent)

Download the agent

To download the agent:

1. In the Alert Logic console, open the Settings menu, and then click Support Information.
2. From the menu bar, click Quick Install Guide and Downloads.
3. Download the appropriate agent and follow the on-screen instructions.
   • For Windows users, click Windows Agents, and then select the desired agent.
   • For Linux users, click Linux Agents. Linux users can select either Debian-based agent installers or RPM-based agent installers. Both installers are available in a 32-bit or 64-bit format.
     
4. Locate the Unique Registration Key from the Downloads screen. Copy your unique registration key. You will need to enter this key to install the agent.
   

Install the agent for Windows

Install the agent via the GUI (host mode)

To install the agent:

1. Run the MSI package.

2. In Provisioning API Key, paste your Unique Registration Key.

3. In Provision, select During Setup.
4. In Proxy Setting, select a connection method if you want traffic to pass through a proxy. You can connect via Direct Connection or a web proxy. You can also enter the URL of the proxy server.
   
5. Click Install.
6. Verify that the agent has registered with the Alert Logic console. To do so, navigate to the deployment the agent is assigned to, click Hosts and Sources, click Sources, and then search for the agent.

Install the agent via the command prompt with image capture

To install the agent via the command prompt and capture the image: 

1. Copy the MSI file to the target machine.
2. Type the following command: 
   

   msiexec /i [path to MSI file] prov_key=[unique registration key] /q

   • /i installs the agent normally.
   • prov_key=[unique registration key] is your Unique Registration Key.
   

   msiexec /i c:\downloads\al-agent-1.0.33.msi prov_only=host prov_key=da39a3ee5e6b4b0d3255bfef95641890dnu80799/q

3. (Optional) If you have set up a NAT or virtual appliance and you want to use it as a single point of egress, enter the corresponding host name or IP address or port via the following command prompt parameters:
   • sensor_host=[host] indicates the IP address where the agent should forward logs.
   • sensor_port=[port] indicates the TCP port where the agent should connect.

4. Once you are finished preparing the image, set the agent service start type to Automatic.

5. Verify that the agent has registered with the Alert Logic console. To do so, click Deployments, click the deployment the agent is assigned to, click Hosts and Sources, click Sources, and then search for your agent.

Create a collection alert rule

You can create a collection alert in Alert Logic Log Manager to receive notification if collection stops for any reason.

You must first create a collection alert and then apply the alert to the source.

To create a collection alert:

1. At the top of the Alert Logic console, from the drop-down menu, select Log Manager.
2. In the left navigation, under Alert Rules, click Collection.
3. In the table of alert rules, in the Actions column, click the gear icon (), and select New Collection Alert.
4. In Collection Alert Name, type a descriptive name.
5. In Time without logs, type a number value in minutes.
6. In Time Between Alert Occurrences, type a number value in minutes.

7. In Email Addresses, type an email address. To add multiple email addresses, separate each entry with a comma.

8. Select Send Alert Once to receive alerts only once.
9. Click Save

Apply a collection alert rule

To apply the collection alert to a log source:

1. In the left navigation, under Collection, click Sources.
2. In Select Some Options, click the empty and select a log source type and then click Apply Filters.
3. In the table of log sources, in the Actions column, click the gear icon ().
4. Select Mass Edit.
5.  In Apply changes to, select All Sources.
   • Select Only Selected Sources to choose an individual log source from the table.
6.  Select your collection alert in Collection Policy.

7. Click Apply.

Related topics