Skip to main content

Arcsight Logger 5.3 CentOS 5.9 Virtualisation

Get the VirtualBox CentOS 5 as a 7z file from:

http://virtualboxes.org/images/centos/
  • Uncompress and save the Centos64.vbox and Centos64.vdi files.
  • Open the Oracle VM VirtualBox manager and select the vbox file to install
  • Make > 20GB disc or there will not be room for logger.
  • Login as root/reverse
Install Gnome Desktop as follows and start:
  • yum groupinstall "X Window System" "GNOME Desktop Environment" 
  • login root/reverse and startx
Check version of CentOS and other prelim:
  • cat /etc/redhat-release #CentOS release 5.9 (Final)
  • uname -a # somewhere x86_64 
  • create user logger
  • open port 443
  • check logger bin file execute box and double click.
  • run in terminal
If not enough space to install logger:
  • C:\Program Files\Oracle\VirtualBox\VBoxManage.exe modifyhd "D:\virtual machines\Centos\centos64.vdi" --resize 20000
  • shutdown centos VM
  • attach gparted-live-0.16.2-1b-i486.iso to CD drive
  • resize sda up to increased size 
  • start Centos VM and find free PE (Physical Extents) #lvm lvgdisplay
Free PE / Size 369 / 11.53 GB
  • Find the current LE (Logical Extents) with #lvm lvdisplay /dev/mapper/VolGroup00-LogVol00
Current LE 220
  • lvm lvresize -l 589 /dev/mapper/VolGroup00-LogVol00
  • resize2fs  /dev/mapper/VolGroup00-LogVol00
  • df -h # To check Centos file system has new allocated space.
Complete install of Arcsight Logger. Log into HTTPS server admin/password

Comments

SecurityBlogger said…
Hi Geoff,
Thanks for the post. Is it possible for you to share a pre-configured VM with arcsight loaded in it. It saves lot of time & effort for many people. Pls suggest.

Thanks.