Pulsar Agent

The agent transfers the data via an encrypted connection to the Enginsight Cloud or On-Premises installation. The connection is exclusively one-way, starting from the agent. Direct communication from the platform to the agent is excluded.

System Requirements

The client must run with root privileges.

Here you get an overview of the currently supported operating systems.

Installation (Creating a New Host)

In this section you will learn how to install our Client Pulsar on your system.

To add a new host, go to the "Hosts" tab in the top menu. Either install a "Server Host" or a "Client Host".

Note that different licenses are required for servers and clients.

After that, please select your operating system.

Linux

Please enter the curl command you now see in your terminal. You need root access to install the client.

You will now be asked to accept our End User License Agreement (EULA). You can find this document here. By downloading our client you agree to the terms and conditions of the EULA.

Finally, you should receive a message that the Pulsar Agent has been successfully installed.

Windows

Run the installation script as root. To do this, press: Windows key + R and type "cmd". Copy and paste the given command in the cmd and press Enter.

You will now be asked to accept our End User License Agreement (EULA). You can find this document here. By downloading our agent, you agree to the terms and conditions from the EULA.

Finally, you should receive a message that Pulsar Agent has been successfully installed.

You can see that Enginsight is now communicating correctly with your device by the following screen within the platform:

Here you can now determine a technical and functional responsible person and and assign tags for the host.

Roll out Pulsar Agent via Windows Group Policy

You can roll out the Pulsar agent to multiple machines in a domain using a startup script. To set up the installation by group policy, create a script that checks whether the agent is installed at each system startup, and if not, runs the installation.

1. Copy the automatic installation script for Windows with your individual identifier and AccessKey to the clipboard. Do not include the top line powershell : To do this, go to Hosts → Create Server Host or Create Client Host in the Enginsight platform, select the operating system "Windows Server 2008+, Windows 7+" and the "Automatic Installation" tab.

2. Paste the copied script into this template at the marked position:

If (Get-Service "Enginsight Pulsar" -ErrorAction SilentlyContinue) {
  break
} Else {
  # Below this line, paste the copied installation command.

}

Create a separate script for server and client licenses.

Your finished script with your individual identifier and AccessKey (for on-premises with customized API) looks like this:

If (Get-Service "Enginsight Pulsar" -ErrorAction SilentlyContinue) {
  break
} Else {
  $dl='https://api.enginsight.com/v1/_/pulsar/latest/ngs-pulsar-amd64-setup.exe'
  [Net.ServicePointManager]::SecurityProtocol = [Net.SecurityProtocolType]::Tls12
  (New-Object System.Net.WebClient).DownloadFile($dl,"$env:TEMP\ngs-pulsar-setup.exe");
  & "$env:TEMP\ngs-pulsar-setup.exe" `
     -acceptEula=true -interactive=false -license server  `
     -accessKeyId xxxxxxxxxxxxxxxxxxxxxxxx                `
     -accessKeySecret xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx    `
     -api https://api.enginsight.com

}

3. Save the finished script as a PowerShell script file with the .ps1 ending.

4. Open the group policy editor: gpedit.msc

5. For the corresponding domain, navigate to Computer Configuration → Windows Settings → Scripts (Startup/Shutdown) → Startup.

6. In the "Scripts" tab, click "Add".

7. Enter powershell.exe as script name.

8. For script parameters, use the following template:

-ExecutionPolicy Bypass -File" \\<networkpath>\Policies\{guid}\Machine\Scripts\Startup\Enginsight-Installation-Script.ps1"

Replace the <networkpath> and the {guid} with your custom parameters.

Make sure that the location of the script is accessible to all machines in the domain and that all machines have permission to run the script.

Install Pulsar Agent in VDI Environments

1. Start your master image system.

2. Install a Pulsar agent via Enginsight platform: Hosts → Create Client Host → select operating system "Windows Server 2008+, Windows 7+" → run script (Windows key + R + "cmd").

3. Open the configuration file of the Pulsar agent under the following path:

C:\Program Files\Enginsight\Pulsar\config.json

4. Remove the _id value and adjust the parameters "environnement": "vdi" and "license": "client".

Your configuration file will now look something like this:

{
    "channel": "master",
    "environnement": "vdi",
    "licence": "client"
    "host": {
        "_id": ""
    },
    "api": {
        "url": "https://api.enginsight.com",
        "proxy": "",
        "noProxy": "",
        "accessKey": {
            "id": "XXXXXXXXXXXXXXXXXXXXXXXXXX",
            "secret": "XXXXXXXXXXXXXXXXXXXXXXXXXXXX"
        }
    }
}

5. Save the configuration file.

6. Delete the host from the platform.

7. Save the master image.

On initial startup, users automatically add themselves to the VDI as hosts. The hosts are named after the account names.

Make sure to book enough client licenses for all monitored virtual desktops.

Proxy

If a proxy is used in the company, it must be specified. During the interactive installation, Enginsight will try to detect the proxy in use and ask you if it should be used.

Alternatively, the proxy can be specified directly in the installation script. Use the following parameters for this:

Proxy

proxy: URL of the proxy through which the connections are to be routed

Windows: -proxy <scheme>://<host>:<port>
Linux: proxy=<scheme>://<host>:<port>

Noproxy

noProxy: URL(s) for which the proxy should not be used

Windows: -noProxy "<scheme>://<host>:<port>,<scheme>://<host>:<port>"
Linux: noProxy="<scheme>://<host>:<port>,<scheme>://<host>:<port>"

Example: Interactive Installation

Following are two examples for the interactive installation of the Pulsar-Agent with proxy parameter and optional noProxy parameter.

Windows

powershell
$dl='https://api.enginsight.com/v1/_/pulsar/latest/ngs-pulsar-amd64-setup.exe'
[Net.ServicePointManager]::SecurityProtocol = [Net.SecurityProtocolType]::Tls12
(New-Object System.Net.WebClient).DownloadFile($dl,"$env:TEMP\setup.exe");
& "$env:TEMP\setup.exe" `
     -identifier jClWfzsPdJ9J3RZaIc2YVsmvKbxaR1JO -license server `
     -accessKeyId ****                                            `
     -accessKeySecret ****                                        `
     -api https://api.enginsight.com                              `
     -proxy http://1.1.1.1:8080                                   `
     -noProxy "http://10.0.0.1:80,http://10.0.0.2:8080"

Linux

curl -sSL https://api.enginsight.com/v1/_/pulsar/setup.sh | sudo -E bash -s \
   identifier=jClWfzsPdJ9J3RZaIc2YVsmvKbxaR1JO license=server \
   accessKeyId=****                                           \
   accessKeySecret=****                                       \
   api=https://api.enginsight.com                             \
   proxy=http://1.1.1.1:8080                                  \
   noProxy="http://10.0.0.1:80,http://10.0.0.2:8080"

Example: Automatic Installation

For automatic installation, the proxy parameter must be included in the installation script if required. Otherwise Enginsight tries to detect the proxy automatically.

Windows

powershell
$dl='https://dev-api.enginsight.com/v1/_/pulsar/latest/ngs-pulsar-amd64-setup.exe'
(New-Object System.Net.WebClient).DownloadFile($dl,"$env:TEMP\setup.exe");
& "$env:TEMP\setup.exe" `
     -acceptEula=true -interactive=false -license server  `
     -accessKeyId ****                                    `
     -accessKeySecret ****                                `
     -api https://api.enginsight.com                      `
     -proxy http://1.1.1.1:8080                           `
     -noProxy "http://10.0.0.1:80,http://10.0.0.2:8080"

Linux

curl -sSL https://api.enginsight.com/v1/_/pulsar/setup.sh | sudo -E bash -s \
   acceptEula=true license=server                   \
   accessKeyId=****                                 \
   accessKeySecret=****                             \
   api=https://api.enginsight.com                   \
   proxy=http://1.1.1.1:8080                        \
   noProxy="http://10.0.0.1:80,http://10.0.0.2:8080"

Subsequent modification of the proxy parameter

If you want to change the proxy parameters of the Pulsar-Agent afterwards, you can do this via config.json. You can find it here:

Windows: C:\Program Files\Enginsight\Pulsar\config.json

Linux: opt\enginsight\pulsar

Tags

You can specify the desired tags during the installation. To do this, add the tags parameter to the installation script. You can also add and customize tags at any time through the user interface.

Tags are very important in the Enginsight platform and increase effectiveness enormously. For example, you can use tags to group alerts or make settings for multiple hosts in the Policy Manager.

Windows: -tags "ids,important"
Linux: tags="ids,important"

Example: Automatic Installation with Tags

Windows

powershell
$dl='https://api.enginsight.com/v1/_/pulsar/latest/ngs-pulsar-amd64-setup.exe'
(New-Object System.Net.WebClient).DownloadFile($dl,"$env:TEMP\setup.exe");
& "$env:TEMP\setup.exe" `
     -acceptEula=true -interactive=false -license server  `
     -accessKeyId ****                                    `
     -accessKeySecret ****                                `
     -api https://api.enginsight.com                      `
     -tags "ids,important"

Linux

curl -sSL https://api.enginsight.com/v1/_/pulsar/setup.sh | sudo -E bash -s \
   acceptEula=true license=server                   \
   accessKeyId=****                                 \
   accessKeySecret=****                             \
   api=https://api.enginsight.com                   \
   tags="ids,important"  

Update Agent

The Enginsight Pulsar-Agent is constantly updated by us. In order for all (new) functions to work as desired, it is necessary that you keep the agent up to date.

In the host overview you will receive a warning if the Pulsar agent does not correspond to the current version.

To update the agent you have two options:

  • You can update the agent on a single host. To do this, click on the host and click "Update Agent".

  • If you want to update the agent on all hosts simultaneously, click "Update Agents" in the Host Overview. You will see a list of hosts that are not running the latest version. Click Update to roll out the latest version of the Agent on all hosts.

Uninstallation

If you need to uninstall the agent from one of your hosts, you can do so from within the Enginsight platform. First go to the Host Overview by clicking on Hosts in the navigation bar. Locate the host you want to uninstall and click on the 3 dots inside the overview tile and then click Delete.

Afterwards you have to confirm the deletion again.

Note that this will irretrievably delete all data on the host.

Manual uninstallation

If the normal uninstallation is not possible, you can also uninstall the agent manually directly on the host.

Windows

1. Navigate to the installation folder of the Pulsar-Agent.

C:\Program Files\Enginsight\Pulsar

There you will find the Powershell script uninstall.ps1.

2. Run the uninstall.ps1 script with administrator privileges on the host to manually uninstall the Pulsar-Agent.

3. Delete the host via the usual way to remove it from the Enginsight platform.

Linux

1. Navigate to the installation folder of the Pulsar agent.

cd /opt/enginsight/pulsar

2. Run the bash script uninstall.sh on the host.

sudo ./uninstall.sh

The warning /sbin/init: Unknown option "--version" is irrelevant and can be ignored.

3. Delete the host via the usual way to remove it from the Enginsight platform.

Advanced Hardening

You can basically disable the execution of plugins in the local configuration file of the Pulsar agent, so that it can no longer be activated via the UI of the Enginsight application.

Be careful with this setting. We recommend such an approach only in rare exceptional cases.

Linux

1. Open the configuration file of the Pulsar agent.

nano /opt/enginsight/pulsar/config.json

2. Add the override to the plugin configuration if the configuration is not already created. (Whether the function already exists depends on when you installed the Pulsar agent).

"override": {
  "plugins": {
    "disabled": true
  }
}

If the override option already exists, simply set the parameter to true.

Be sure to add a comma after the curly brace enclosing the API configuration. Otherwise the override configuration will be ignored.

3. Restart the Pulsar agent.

service ngs-pulsar restart

Windows

  1. Open the configuration file of the Pulsar agent.

C:\Programme\Enginsight\Pulsar\config.json

2. Add the override to the plugin configuration, if the configuration is not already created. (Whether the function already exists depends on when you installed the Pulsar agent).

"override": {
  "plugins": {
    "disabled": true
  }
}

If the override option already exists, simply set the parameter to true.

Be sure to add a comma after the curly brace enclosing the API configuration. Otherwise the override configuration will be ignored.

3. Restart the Pulsar agent.

Windows key + R → services.msc → Enginsight Pulsar → right-click → All tasks → Restart

Last updated