Red Hat Summit Red Hat SummitSupportConsoleDevelopersStart a trialContact

Chapter 9. Monitoring hosts by using Red Hat Lightspeed

You can use Red Hat Lightspeed to diagnose systems and downtime related to security exploits, performance degradation, and stability failures. You can use the Red Hat Lightspeed dashboard to quickly identify key risks to stability, security, and performance. You can sort by category, view details of the impact and resolution, and then determine what systems are affected.

To use Red Hat Lightspeed to monitor hosts that you manage with Satellite, you must first install Red Hat Lightspeed on your hosts and register your hosts with Red Hat Lightspeed:

To view the logs for all plugins, go to /var/log/foreman/production.log.

If you have problems connecting to Red Hat Lightspeed, ensure that your certificates are up-to-date. Refresh your subscription manifest to update your certificates.

You can change the default schedule for running insights-client by configuring insights-client.timer on a host. For more information, see Changing the insights-client schedule in the Client Configuration Guide for Red Hat Insights.

You can view the information available for hosts from Red Hat Lightspeed from the Satellite web UI.

To review information from Red Hat Lightspeed for your hosts, navigate to the following pages in the Satellite web UI:

  • Navigate to Red Hat Lightspeed > Recommendations where the vertical ellipsis next to the Remediate button provides a View in Red Hat Lightspeed link to the general recommendations page. On each recommendation line, the vertical ellipsis provides a View in Red Hat Lightspeed link to the recommendation rule, and, if one is available for that recommendation, a Knowledgebase article link.
  • For additional information, navigate to Hosts > All Hosts. If the host has recommendations listed, click on the number of recommendations. On the Red Hat Lightspeed tab, the vertical ellipsis next to the Remediate button provides a Go To Satellite Red Hat Lightspeed page link to information for the system, and a View in Red Hat Lightspeed link to host details on the console.

You can set the host_registration_insights parameter to False to omit rh-cloud and insights-client reports. Satellite will exclude the hosts from rh-cloud reports and block insights-client from uploading a report to the cloud.

Procedure

  1. In the Satellite web UI, navigate to Host > All Hosts.
  2. Select any host for which you want to change the value.
  3. On the Parameters tab, click on the edit button of host_registration_insights.

  4. Set the value to False.

    If you set the parameter to false on a host that is already reported on the Red Hat Hybrid Cloud Console, it will be still removed automatically from the inventory. However, this process can take some time to complete.

    You can set this parameter at any level. For more information, see Host parameter hierarchy in Provisioning hosts.

9.3. Obfuscating hostnames and IP addresses
Copy link

You can use Red Hat Satellite to obfuscate hostnames and IP addresses when uploading host data to Red Hat Lightspeed. Obfuscation ensures that sensitive identifying information is not exposed.

When obfuscation settings are enabled, Satellite obfuscates hostnames and IP addresses. If obfuscation settings are enabled and the host has its own insights-client obfuscation settings, Satellite honors the host settings. If obfuscation settings are disabled, Satellite does not obfuscate hostnames or IP addresses unless the client has obfuscation enabled in insights-client.

By default, Satellite applies global obfuscation settings unless an insights-client on the host overrides the settings with its own configuration. This procedure describes how Satellite applies obfuscation settings.

Prerequisites

  • Your hosts have insights-client installed and configured.

Procedure

  1. In the Satellite web UI, navigate to Red Hat Lightspeed > Inventory Upload.
  2. Enable the Obfuscate host names and Obfuscate host ipv4 addresses settings to obfuscate host names and ipv4 addresses sent to the Red Hat Hybrid Cloud Console.

Verification

  1. In the Satellite web UI, navigate to Red Hat Lightspeed > Inventory Upload.
  2. In the Organization dropdown menu, select the organization that uploaded the host data.
  3. Click Download report to download the host inventory report from Red Hat Lightspeed.
  4. Verify that the hostname is randomhostname.example.com and the IP address is obfuscated.

The RedHatInsights.insights-client Ansible role is used to automate the installation and registration of hosts with Red Hat Lightspeed.

Procedure

  1. Add the RedHatInsights.insights-client role to the hosts. See Using Ansible Roles to Automate Repetitive Tasks on Clients in Managing configurations by using Ansible integration.
  2. To run the RedHatInsights.insights-client role on your host, navigate to Hosts > All Hosts and click the name of the host that you want to use.
  3. On the host details page, expand the Schedule a job dropdown menu.
  4. Click Run Ansible roles.

Additional resources

You can enable automatic synchronization of the recommendations from Red Hat Hybrid Cloud Console that occurs daily by default. If you leave the setting disabled, you can synchronize the recommendations manually.

Procedure

  • To get the recommendations automatically:

    1. In the Satellite web UI, navigate to Red Hat Lightspeed > Recommendations.
    2. Enable Sync Automatically.

  • To get the recommendations manually:

    1. In the Satellite web UI, navigate to Red Hat Lightspeed > Recommendations.
    2. On the vertical ellipsis, click Sync Recommendations.

When hosts are removed from Satellite, they can also be removed from the inventory of Red Hat Lightspeed, either automatically or manually. You can configure automatic removal of hosts from the Red Hat Lightspeed Inventory during Red Hat Hybrid Cloud Console synchronization with Satellite that occurs daily by default.

If you leave the setting disabled, you can still remove the bulk of hosts from the Inventory manually.

If Automatic mismatch deletion is enabled, Satellite removes any hosts from the Red Hat Hybrid Cloud Console that are not registered in Satellite. Enable this setting only when all hosts are registered through Satellite. If any hosts are registered through other Satellite instances or directly to the Red Hat Hybrid Cloud Console, Satellite deletes them.

Prerequisites

  • Your user account must have the permission of view_foreman_rh_cloud to view the Inventory Upload page in Satellite web UI.

Procedure

  1. In the Satellite web UI, navigate to Red Hat Lightspeed > Inventory Upload.
  2. Enable the Automatic mismatch deletion setting.

9.7. Setting minimal data collection
Copy link

You can configure Satellite to use minimal reporting if you want to limit the data sent to Red Hat. You can use minimal reporting to limit the amount of system data sent to the Subscriptions service, which remains active.

Other Red Hat Lightspeed services are disabled because they require installed package data, which minimal reports do not include. Reports are still processed daily during the midnight synchronization cycle.

Minimal reports also exclude hostnames, IP addresses, and installed packages. Therefore, obfuscation and exclusion settings do not apply.

If you switch to Analytics data collection, Satellite enables the following settings by default:

  • Obfuscate host names
  • Obfuscate host ipv4 addresses
  • Exclude installed packages

Review and adjust these settings to control what data Satellite shares.

Prerequisites

  • Your user account has a role that grants the edit_settings permission.
  • Ensure that you delete existing data in Red Hat Lightspeed Inventory before switching to minimal reporting. To remove existing data of a system, navigate to Inventory > Systems in the Red Hat Hybrid Cloud Console, select the system, and click Delete.
  • You have selected an organization and location.

Procedure

  1. In the Satellite web UI, navigate to Red Hat Lightspeed > Inventory Upload.
  2. Select the Minimal data collection setting from the dropdown menu under Settings.
  3. When you select this option, Satellite also updates the corresponding setting on the Red Hat Lightspeed tab under Administer > Settings.
  4. Click the Generate and upload report button to create a new inventory report and send it to the Red Hat Hybrid Cloud Console.

Example 9.1. Example of data collected in a minimal report

{
  "report_slice_id": "de92044d-9d77-4895-83c4-a476f5020519",
  "hosts": [
    {
      "account": "123456789",
      "subscription_manager_id": "9fc621b9-08c3-4085-a749-bfed38c3052e",
      "insights_id": "9fc621b9-08c3-4085-a749-bfed38c3052e",
      "bios_uuid": "203F234F-58C7-4237-8DDF-A17A2838A66C",
      "bios_vendor": "SeaBIOS",
      "bios_version": "1.16.1-1.el9",
      "arch": "x86_64",
      "infrastructure_type": "virtual",
      "system_profile": {
        "installed_products": [
          {
            "name": "Red Hat Enterprise Linux for x86_64",
            "id": "479"
          }
        ],
        "cores_per_socket": 1,
        "system_memory_bytes": 3836579840,
        "number_of_cpus": 1,
        "number_of_sockets": 1
      },
      "cpu_socket(s)": "1"
    }
  ]
}
Copy to Clipboard Toggle word wrap

With Satellite, you can create a Red Hat Lightspeed remediation plan and run the plan on Satellite hosts.

Procedure

  1. In the Satellite web UI, navigate to Red Hat Lightspeed > Recommendations.

  2. On the Red Hat Lightspeed page, select the number of recommendations that you want to include in a Red Hat Lightspeed plan.

    You can only select the recommendations that have an associated playbook.

  3. Click Remediate.
  4. In the Remediation Summary window, you can select the Resolutions to apply. Use the Filter field to search for specific keywords.
  5. Click Remediate.
  6. In the Job Invocation page, do not change the contents of precompleted fields.
  7. Optional. For more advanced configuration of the Remote Execution Job, click Show Advanced Fields.
  8. Select the Type of query you require.
  9. Select the Schedule you require.

  10. Click Submit.

    In the Jobs window, you can view the progress of your plan.

9.9. Examining vulnerability of systems
Copy link

You can view Common Vulnerabilities and Exposures (CVE) from Red Hat Lightspeed vulnerability service in Satellite. You can examine how the CVEs affect your hosts.

Important

Red Hat Lightspeed vulnerability service in Satellite is a Technology Preview feature only. Technology Preview features are not supported with Red Hat production service level agreements (SLAs) and might not be functionally complete. Red Hat does not recommend using them in production. These features provide early access to upcoming product features, enabling customers to test functionality and provide feedback during the development process.

For more information about the support scope of Red Hat Technology Preview features, see Technology Preview Features Support Scope.

Prerequisites

  • You have installed Red Hat Lightspeed in Satellite.
  • Your Satellite account has a role that grants one of the following permissions: view_foreman_rh_cloud or view_insights_hits.

Procedure

  1. In the Satellite web UI, navigate to Red Hat Lightspeed > Vulnerability.
  2. In the CVE ID column, click the ID of the vulnerability to see details.

Additional resources

Back to top
Red Hat logoGithubredditYoutubeTwitter

Learn

Try, buy, & sell

Communities

About Red Hat Documentation

We help Red Hat users innovate and achieve their goals with our products and services with content they can trust. Explore our recent updates.

Making open source more inclusive

Red Hat is committed to replacing problematic language in our code, documentation, and web properties. For more details, see the Red Hat Blog.

About Red Hat

We deliver hardened solutions that make it easier for enterprises to work across platforms and environments, from the core datacenter to the network edge.

Theme

© 2025 Red Hat