Fortinet black logo

User Guide

Install the FortiMonitor Agent without root access

24.1.0
Copy Link
Copy Doc ID af1daa65-c273-11ec-9fd1-fa163e15d75b:367603
Download PDF

Install the FortiMonitor Agent without root access

Important Security Note

We highly recommend creating a new user for the FortiMonitor Agent so that the permissions are scoped to only require what is needed for the Agent, rather than a user which has some sort of elevated permissions. Please consult with FortiMonitor Support for best practices on this.

To install the FortiMonitor Agent without root access

User Creation (to be done as root)

adduser -m -s /bin/bash fm-agent;

passwd fm-agent

# redhat/centos only;

yum install python3-devel gcc;

# debian/ubuntu only;

apt-get install python3-devel gcc;

pip3 install virtualenv

Allow Cron

On some systems, you may have an /etc/cron.allow file that whitelists which users can run crontab. If this exists on your system, add the new fm-agent user to that file. If it does not exist, skip this step.

Agent Installation

Login to the server as user fm-agent and then run the following:

wget https://storage.googleapis.com/agent-repo/tar-stable/fm-agent-latest.tar.gz && tar -xvzf fm-agent-latest.tar.gz

cd ~

mkdir etc

vim etc/fm-agent-manifest

Within that text editor session, add the below line and replace with your own customer key .

Copy;

customer_key = xxxx-xxxx-xxxx-xxxx;

If needed, you can specify any of the other agent install options that are supported in our Agent Manifest File. Then run the following:

cd ~/fm-agent-2022.22.3/ #replace version number;

python install.py --no-root

This should install the agent and register the server within your control panel account within the incoming directory.

Install the FortiMonitor Agent without root access

Important Security Note

We highly recommend creating a new user for the FortiMonitor Agent so that the permissions are scoped to only require what is needed for the Agent, rather than a user which has some sort of elevated permissions. Please consult with FortiMonitor Support for best practices on this.

To install the FortiMonitor Agent without root access

User Creation (to be done as root)

adduser -m -s /bin/bash fm-agent;

passwd fm-agent

# redhat/centos only;

yum install python3-devel gcc;

# debian/ubuntu only;

apt-get install python3-devel gcc;

pip3 install virtualenv

Allow Cron

On some systems, you may have an /etc/cron.allow file that whitelists which users can run crontab. If this exists on your system, add the new fm-agent user to that file. If it does not exist, skip this step.

Agent Installation

Login to the server as user fm-agent and then run the following:

wget https://storage.googleapis.com/agent-repo/tar-stable/fm-agent-latest.tar.gz && tar -xvzf fm-agent-latest.tar.gz

cd ~

mkdir etc

vim etc/fm-agent-manifest

Within that text editor session, add the below line and replace with your own customer key .

Copy;

customer_key = xxxx-xxxx-xxxx-xxxx;

If needed, you can specify any of the other agent install options that are supported in our Agent Manifest File. Then run the following:

cd ~/fm-agent-2022.22.3/ #replace version number;

python install.py --no-root

This should install the agent and register the server within your control panel account within the incoming directory.