Install a Collector on Linux
Follow the steps in this topic to install or uninstall a collector on Linux. See Installed Collectors for information on other OSs.
System Requirements
- Linux, major distributions 64-bit, or any generic Unix capable of running Java 1.8
- Single core, 512MB RAM
- 8GB disk space
- Package installers require TLS 1.2 or higher
Download
Download the Collector in either of the following ways.
Via installation
- Classic UI. In the main Sumo Logic menu, select Manage Data > Collection > Collection.
New UI. In the top menu select Configuration, and then under Data Collection select Collection. You can also click the Go To... menu at the top of the screen and select Collection. - Click Add Collector.
- Click Installed Collector.
- Click the link for the Collector to begin the download.
Via browser
Open a browser and enter the static URL for your Sumo deployment. See Which endpoint should I use? if you are unsure. The download begins immediately. See Download a Collector from a Static URL for a list of URLs for your deployment pod.
Install Collector
Install the Collector on Linux using any of the four methods below.
You can build a Collector into a Linux machine image such as an Amazon AMI or VMware image. After installing Collectors, you can configure Sources from Sumo Logic or by providing the Source settings in a JSON file. If you're using a UTF-8 encoded JSON file, you must provide the file before starting the collector. The JSON file needs to be UTF-8 encoded.
Using the UI installer
This method does not support all advanced settings.
Run the installer on your server with root or Administrator privileges. If you are not logged in as root or Administrator, you might be prompted to reauthenticate to your system when you start the UI Installer.
- Open the downloaded installer file.
- If prompted, enter the root or Administrator user name and password for the system.
- Open the wizard to show the Welcome page. Click Next.
- Accept the license agreement and click Next.
- Browse to select a location for the collector or accept the default and click Next to install the Collector files on your machine.
- The Installer displays the summary of the default settings. If you want to change any of these, click Advanced UI Installer Settings and follow the instructions. Click Next.
- Choose an authentication method.
- Access Key. If you have a Sumo Logic access ID and key, click Next, enter the access ID and key, and click Next.
- Installation Token. Enter the Token String you want to use to register the Collector in the input box.
- Click Finish to complete the setup.
- In Sumo Logic, select Manage Data > Collection > Collection and verify that you can see the Collector. Look for the name that is listed as Collector Name in the confirmation step of this procedure (the name can be customized under Advanced Settings). If a Collector with that name already exists, a suffix is appended to uniquely identify it. If you don’t see the collector, check the Error Codes list to help troubleshoot.
Using the command line installer
- Add execution permissions to the downloaded Collector file (.sh):
chmod +x SumoCollector.sh
- Run the script with the parameters that you want to configure. See Parameters for the Command Line Installer for a description of the parameters. By default the Collector will be installed in either
/opt/SumoCollector
or/usr/local/SumoCollector
.
Examples
Using an Installation Token:
sudo ./SumoCollector.sh -q -Vsumo.token_and_url=<installationToken> -Vsources=<absolute_filepath>
Using access ID and access key:
sudo ./SumoCollector.sh -q -Vsumo.accessid=<accessId> -Vsumo.accesskey=<accessKey> -Vsources=<absolute_filepath>
Adding proxy settings:
sudo ./SumoCollector.sh -q -Vsumo.accessid=<accessId> -Vsumo.accesskey=<accessKey> -Vsources=<absolute_filepath> -Vproxy.host=<proxyHost> -Vproxy.port=<proxyPort>
Including syncSources
and a customized Collector name:
sudo ./SumoCollector.sh -q -Vsumo.accessid=<accessId> -Vsumo.accesskey=<accessKey> -VsyncSources=<absolute_filepath> -Vcollector.name=<name>
Using the RPM or Debian package
You can use the RPM or Debian package to install a Collector on a Linux 64-bit system.
-
Install the Collector using the downloaded installation package. For the RPM package, use the command:
sudo rpm -i SumoCollector-19.XXX-XX.x86_64.rpm
#Replace XXX-XX with the version number of the package you downloaded.For the Debian package, use the command:
sudo dpkg -i SumoCollector-19.XXX-XX.x86_64.deb
#Replace XXX-XX with the version number of the package you downloaded.noteReplace XXX-XX in the command above with the version number of the package you downloaded.
The RPM and Debian packages install the collector in the
/opt/SumoCollector
directory. By default, the Collector is installed as a system service, but not yet started. -
Configure the Collector
user.properties
file in the/opt/SumoCollector/config/
directory. The Collector uses the settings defined inuser.properties
to register and start. See user.properties for a full list of all the supported parameters.To use an access key, provide the
accessid
andaccesskey
parameters. For example:name = <collectorName>
accessid = <accessId>
accesskey = <accessKey>To use an installation token, provide the authentication parameters
token
andurl
. To use these two parameters, you'll need to manually base64 decode the Token String. Once decoded, you'll have a string with a token and a URL.For example, the following decoded Token String:
sumoxxxxxxxxxxxxxxxxxxxxxxxxxxxxhttps://collectors.sumologic.com
would be used as:
name = <collectorName>
url=https://collectors.sumologic.com
token=SUMOXXXXXXXXXXXXXXXXXXXXXXXXXXXXnoteStarting with collector 19.170+, the installation directory is secured to users belonging to the
sumologic_collector
group. Modifyinguser.properties
may require sudo privileges. For more information see Enhanced File System Security for Installed Collectors. -
(Optional) Provide a JSON Source information. You can pass all Source settings in a UTF-8 encoded JSON file. If you're using a JSON file, you must provide the file before starting the Collector. See Using JSON to configure Sources. Alternatively, you can configure Sources at any time by using the Sumo web app. See Sources.
-
(Optional) Set the run a user for the Collector if you want the Collector to run as a user other than root. See run as for a Collector.
-
(Optional on Collector version 19.253-3+ in the Fed deployment) Enable FIPS 140-2 compliant Java Cryptography Extension (JCE) to encrypt your data to Sumo Logic's Fed deployment in US1 only. FIPS mode is not supported for any other deployment. If you are unsure whether you are on the Fed deployment, check our deployments. To enable, locate and run the script
configureFipsMode.sh
contained in Collector's installation directory under/script
:$ sh ./script/configureFipsMode.sh
-
Start the Collector using the following command.
sudo service collector start
Using the binary package
-
Install the version of JRE you want to use from the following location. (The collector requires Java 8 or higher). The binary installation process does not include JRE installation. See the downloads list.
-
Check the version of Java is 8 or higher:
java -version
-
Untar the downloaded binary file inside your desired destination directory to create a subdirectory named sumocollector:
tar -xvf SumoCollector_unix_XXX.tar.gz
-
Copy the platform-specific wrapper file to the sumocollector directory:
cp tanuki/wrapper-<platform> .
-
Make the wrapper, collector, and script directory files executable:
chmod ug+x wrapper-<platform>
chmod ug+x collector
chmod ug+x script/* -
Configure the Collector
user.properties
file in the/opt/SumoCollector/config/
directory. The Collector uses the settings defined inuser.properties
to register and start. See user.properties for a full list of all the supported parameters.To use an access key, provide the
accessid
andaccesskey
parameters. For example:name = <collectorName>
accessid = <accessId>
accesskey = <accessKey>
wrapper.java.command = javaTo use an installation token, provide the authentication parameters
token
andurl
. To use these two parameters, you'll need to manually base64 decode the Token String. Once decoded, you'll have a string with a token and a URL.For example, the following decoded Token String:
SUMOXXXXXXXXXXXXXXXXXXXXXXXXXXXXhttps://collectors.sumologic.com
would be used as:
name = <collectorName>
url=https://collectors.sumologic.com
token=SUMOXXXXXXXXXXXXXXXXXXXXXXXXXXXX
wrapper.java.command = java -
Set access control for files under the sumocollector directory:
sudo script/secureFiles.sh
-
(Optional) Provide JSON Source information. You can pass all Source settings in a UTF-8 encoded JSON file. If you're using a JSON file, you must provide the file before starting the Collector. See Using JSON to configure Sources. Alternatively, you can configure sources at any time by using the Sumo web app. See Sources.
-
(Optional) Set the run as user for the Collector if you want the Collector to run as a user other than root. See run as for a Collector.
-
(Optional on Collector version 19.253-3+) Enable FIPS 140-2 compliant Java Cryptography Extension (JCE) to encrypt your data. Once enabled, the Collector version cannot be downgraded below version 19.253-1. To enable, locate and run the script configureFipsMode.sh contained in Collector's installation directory under /script:
$ sh ./script/configureFipsMode.sh
-
Install the Collector as a service. Use the following command to install the Collector as a service that is started when the machine starts.
sudo ./collector install
-
Start the Collector service. Use the following command to start the collector service.
sudo ./collector start
-
To verify that the collector is installed, go to Manage Data > Collection > Collection in the Sumo web app and verify that you can see the collector.
Uninstall the collector
Uninstalling a collector requires the following two steps:
- Uninstall the collector from the Linux system using any of these methods:
- Remove the collector from Sumo Logic.
Uninstall using the UI Installer
- On your system, in the Applications folder, find the
Sumo Logic Collector
folder. - Double-click the file
Sumo Logic Collector Uninstaller
. - If prompted, select your language and click OK.
- Enter the user name and password for the system.
- When the Sumo Logic Collector Uninstall wizard is displayed, click Next to remove the collector.
- When the success message is displayed, click Finish.
Uninstall using the command line
- In a terminal prompt, change the directory to the collector installation directory. By default, the collector will be installed in either
/opt/SumoCollector
or/usr/local/SumoCollector
.cd /usr/local/SumoCollector
- Run the
uninstall
binary with the-q
option. The-q
option executes the command without presenting additional prompts.sudo ./uninstall -q
Uninstall using the RPM/Debian packages
For the RPM package, use the command:
sudo rpm -e SumoCollector
For the Debian package, use the command:
sudo dpkg -r SumoCollector
Uninstall using the binary package
- Uninstall the collector service.
sudo <Collector Installation Directory>/collector remove
- Remove the collector installation directory.
sudo rm -rf <Collector Installation Directory>
- (Optional) On some distributions, for instance, Ubuntu, you may need to re-synchronize the daemon setting before installing the collector again.
sudo systemctl daemon-reload
Remove the collector from the web app
- Classic UI. In the main Sumo Logic menu, select Manage Data > Collection > Collection.
New UI. In the top menu select Configuration, and then under Data Collection select Collection. You can also click the Go To... menu at the top of the screen and select Collection. - Find the collector you want to remove, and click Delete.
- When the Confirm dialog displays, click OK.
A success message is displayed and the collector is removed from the list.