Chapter 10. Monitoring hosts by using Red Hat Lightspeed in Satellite
You can use local services of Red Hat Lightspeed in Satellite to assess system health on hosts running Red Hat Enterprise Linux without connecting to the Red Hat Hybrid Cloud Console. Red Hat Lightspeed in Satellite provides advisor recommendations and vulnerability reports.
If you use Red Hat Lightspeed in Satellite:
- The Red Hat Lightspeed services run locally on your Satellite Server.
- Satellite only communicates with the locally running services of Red Hat Lightspeed in Satellite.
- Satellite does not send any reports to the Red Hat Hybrid Cloud Console.
- Satellite does not forward any data through the Insights client to the Red Hat Hybrid Cloud Console.
- You cannot use any of the hosted services on the Red Hat Hybrid Cloud Console.
Prerequisites
- You have installed Red Hat Lightspeed in Satellite on your Satellite Server. For more information, see Installing and configuring Red Hat Lightspeed in Satellite in Installing Satellite Server in a disconnected network environment.
- Install and configure the Insights client on hosts during host registration or provisioning. For more information, see Section 3.3, “Registering hosts by using global registration”.
- For hosts already registered to Satellite, install and configure the Insights client on your hosts by using an Ansible role. For more information, see Section 10.1, “Deploying Insights client on registered hosts”.
-
You can change the schedule for running the Insights client by configuring
insights-client.timeron a host. For more information, see Changing the insights-client schedule in the Client Configuration Guide for Red Hat Lightspeed.
Troubleshooting
-
You can find the logs in the
/var/log/foreman/production.logfile.
10.1. Deploying Insights client on registered hosts Copy linkLink copied to clipboard!
You can use the RedHatInsights.insights-client Ansible role to automate the installation of the Insights client on hosts and initiate the host data upload.
Prerequisites
- Remote execution with the Ansible provider is available.
Ensure that the following repositories are enabled on your host:
-
On Red Hat Enterprise Linux 10:
rhel-10-for-x86_64-baseos-rpmsandrhel-10-for-x86_64-appstream-rpms -
On Red Hat Enterprise Linux 9:
rhel-9-for-x86_64-baseos-rpmsandrhel-9-for-x86_64-appstream-rpms -
On Red Hat Enterprise Linux 8:
rhel-8-for-x86_64-baseos-rpmsandrhel-8-for-x86_64-appstream-rpms -
On Red Hat Enterprise Linux 7:
rhel-7-server-rpms
-
On Red Hat Enterprise Linux 10:
Procedure
- Add the RedHatInsights.insights-client role to the hosts. For more information, see Using Ansible roles to automate repetitive tasks on hosts in Managing configurations by using Ansible integration.
- To run the RedHatInsights.insights-client role on your host, navigate to Hosts > All Hosts and click the name of the host that you want to use.
- On the host details page, expand the Schedule a job dropdown menu.
- Click Run Ansible roles.
10.2. Examining recommendations for hosts Copy linkLink copied to clipboard!
You can view the recommendations for RHEL hosts in the Satellite web UI.
Procedure
- In the Satellite web UI, navigate to Red Hat Lightspeed > Recommendations.
- Click the arrow next to the recommendation to expand the recommendation details.
- Click the name of the recommendation to view affected hosts.
10.3. Remediating issues based on Red Hat Lightspeed recommendations Copy linkLink copied to clipboard!
You can remediate issues on RHEL hosts based on Red Hat Lightspeed recommendations. You can only remediate recommendations that have an associated playbook.
Procedure
- In the Satellite web UI, navigate to Red Hat Lightspeed > Recommendations.
- Click the name of the recommendation to view the recommendation details.
- Select the affected hosts that you want to remediate.
- Click Remediate.
- In the Remediation summary window, you can select the Resolutions to apply if there are multiple options. Use the Filter field to search for specific keywords.
- Click Remediate.
Verification
- On the Jobs page, you can view the progress of your remediation.
- Verify that the remediation job completed successfully.
10.4. Examining vulnerability of hosts Copy linkLink copied to clipboard!
You can view Common Vulnerabilities and Exposures (CVE) from Red Hat Lightspeed vulnerability service in Satellite. You can examine how the CVEs affect your hosts.
Red Hat Lightspeed vulnerability service in Satellite is a Technology Preview feature only. Technology Preview features are not supported with Red Hat production service level agreements (SLAs) and might not be functionally complete. Red Hat does not recommend using them in production. These features provide early access to upcoming product features, enabling customers to test functionality and provide feedback during the development process.
For more information about the support scope of Red Hat Technology Preview features, see Technology Preview Features Support Scope.
Prerequisites
- You have installed Red Hat Lightspeed in Satellite.
-
Your Satellite account has a role that grants one of the following permissions:
view_foreman_rh_cloudorview_insights_hits.
Procedure
- In the Satellite web UI, navigate to Red Hat Lightspeed > Vulnerability.
- In the CVE ID column, click the ID of the vulnerability to see details.
10.5. Exclusion of hosts from Red Hat Lightspeed analytics Copy linkLink copied to clipboard!
You can exclude hosts from Red Hat Lightspeed analytics by using a host parameter.
host_registration_insights-
Setting this parameter to
falsewill prevent Satellite Server from forwarding data from the Insights client on hosts to Red Hat Lightspeed services. The Insights client will not be installed on newly registered hosts.
You can set this parameter at any level. For more information, see Appendix D, Host parameter hierarchy.