Troubleshooting the Agent Installation Failure
An agent needs to be installed on ECSs for security data collection. If the installation fails, you can fix the fault by following the instructions provided in this section.
Possible Causes
The possible causes are as follows:
- The network between the ECS where you want to install the Agent and the OBS bucket storing the Agent is disconnected.
- The disk space of the ECS server is insufficient.
- Failed to obtain the IAM token.
- Failed to verify the workspace ID.
- The Agent has been installed, while the system fails to find it.
Locating the Cause and Fixing the Failure
- The network between the ECS where you want to install the Agent and the OBS bucket storing the Agent is disconnected.
Figure 1 Disconnected network between the server and OBS
Solution
- (Optional) Method 1: Connect the ECS to OBS.
- (Optional) Method 2: Manually download the installation script and installation package to the local PC, and upload the installation package to the /opt/cloud directory on the server.
- Log in to the OBS management console.
- In the navigation pane on the left, choose Buckets. On the displayed page, click the name of the target bucket.
- On the displayed details page, download the installation script and installation package.
- Use a remote management tool, such as SecureFX or WinSCP, to log in to the server.
- Upload the installation package to the /opt/cloud directory on the server.
- The disk space of the ECS is insufficient.
Figure 2 Insufficient disk space
Solution
Clear the disk to reserve sufficient space.
- Failed to obtain the IAM token.
- Symptoms
If information shown in the following figure is displayed in the log, the call to obtain IAM token failed.
Figure 3 IAM token failure
- Troubleshooting and Solution
- Check whether the IAM account or username in the command is correct.
Figure 4 Username and password of an IAM user
- If any of them or both of them are incorrect, run the installation command with correct information again.
- If they are correct, go to 2.
- Run the vim /etc/salt/iam_token.txt command to check whether the /etc/salt/iam_token.txt file exists.
- If the information shown in the following figure is displayed, the directory exists. Go to 3.
Figure 5 Checking files
- If a message is displayed indicating that the file does not exist, contact technical support.
- If the information shown in the following figure is displayed, the directory exists. Go to 3.
- Run the ping command to check whether the server is reachable. If it is unreachable, enable the communication.
Figure 6 Checking the network
- Check whether the IAM account or username in the command is correct.
- Symptoms
- Failed to verify workspace ID.
- Symptoms
If the information shown in the following figure is displayed, the Workspace ID verification fails.Figure 7 Workspace ID verification failure
- Solution
- Log in to the SecMaster management console.
- In the navigation pane, choose Workspaces. In the workspace list, click the name of the target workspace.
- In the navigation tree on the left, choose . On the node management page displayed, click the target node name.
- Check workspace ID and project ID in the command output.
Figure 8 Parameters on the console
- Check whether the workspace ID and project ID in the command are the same as those in the file in 4.
Figure 9 Parameter information in the command
- Use the correct workspace ID and project ID to run the command again.
- Symptoms
- The Agent has been installed, while the system fails to find it.
- Symptoms
If the information shown in the following figure is displayed, the Agent has been installed.Figure 10 Agent installed already
- Solution
- (Optional) Method 1: Logging out the node on the management console.
- Log in to the SecMaster management console.
- In the navigation pane, choose Workspaces. In the workspace list, click the name of the target workspace.
- In the navigation tree on the left, choose Settings > Component management. On the node Management page, locate the row that contains the target node and click Logout.
- In the displayed dialog box, click OK.
- (Optional) Method 2: Run the script command to uninstall the Agent.
- Use a remote management tool, such as SecureFX or WinSCP, to log in to the server.
- Run the sh /opt/cloud/agent_controller_euler.sh uninstall command to uninstall the Agent.
- Check whether the uninstallation is complete.
- Use a remote management tool, such as SecureFX or WinSCP, to log in to the server.
- (Optional) Method 1: Run the ls -a /opt/cloud/ command to view the files in the /opt/cloud directory. If the information shown in the following figure is displayed (including only the script file), the uninstallation is complete.
Figure 11 Script file
- (Optional) Method 2: Run the salt-minion --version command. If the following information is displayed, the uninstallation is complete.
Figure 12 Checking Agent
It takes some time to deregister a node. Do not install the Agent until you confirm that the node has been deregistered.
- (Optional) Method 1: Logging out the node on the management console.
- Symptoms
Feedback
Was this page helpful?
Provide feedbackThank you very much for your feedback. We will continue working to improve the documentation.