Alternate method for installing xAgent software on Linux endpoints

To manually install the xAgent software on a single Linux endpoint using the .run file :

1. Open a Terminal session on the Linux endpoint that has the xAgent installation package, .tgz file.

   username@localhost:~$

2. Use the cd command to change to the FireEye directory.

   username@localhost:~$ cd desktop

   username@localhost:~/Desktop$ cd FireEye

3. Use the ls command to verify that the IMAGE_HX_AGENT_LINUX_30.x.x.tgz file is in the FireEye directory.

   username@localhost:~/Desktop/FireEye$ ls

   IMAGE_HX_AGENT_LINUX_30.x.x.tgz

4. Use the tar zxf command to unzip and extract the files from the Linux xAgent installation package:

   username@localhost:~/Desktop/FireEye$ tar zxf IMAGE_HX_AGENT_LINUX_30.x.x.tgz.

   The .tgz package (Linux) includes the following files:

   • Agent .rpm files

   • Agent .deb files

   • Agent .run file (xagtSetup_30.x.x.run)

   • Agent configuration file (agent_config.json).

5. Use the ls command to view the files.

   username@localhost:~/Desktop/FireEye$ ls

   You will see a list of all the files in the xAgent installation package.

6. Execute the xagtSetup_30.x.x.run script and install the xAgent software on your Linux endpoint. You must have sudo access to perform steps 6-8.

   username@localhost:~/Desktop/FireEye$ sudo ./

   xagtSetup_30.x.x.run

   After the script completes, you will see the following screen indicating the next installation steps:

   Step 1: Import the agent configuration file.

   Step 2. Start the agent services.

   Important

   You must import the agent configuration file before starting the xAgent services on your Linux endpoint.

7. After the installation script is complete, use the i option to import the agent configuration file from the /opt/fireeye/bin/xagt binary path:

   username@localhost:~/Desktop/FireEye$ sudo /opt/fireeye/bin/xagt -i agent_config.json

8. Start the xAgent services on your Linux endpoint using one of the commands below:

   For endpoints running Linux version RHEL 6.x or CentOS 6.x:

   username@localhost:~/Desktop/FireEye$ sudo service xagt start

   or

   For endpoints running Linux version RHEL 7.x or CentOS 7.x:

   username@localhost:~/Desktop/FireEye$ sudo systemctl start xagt

   After starting the agent services, you can check the status of the xAgent services with the sudo systemctl status xagt command.