This document contains proprietary and confidential information of LogLogic, Inc. and its licensors.
In accordance with the license, this document may not be copied, disclosed, modified, transmitted,
or translated except as permitted in writing by LogLogic, Inc.
Trademarks
"LogLogic" and the LogLogic logo are trademarks of LogLogic, Inc. in the United States and/or foreign countries.
All other company product names are trademarks or registered trademarks of their respective owners.
Notice
The information contained in this document is subject to change at any time without notice. All warranties with
respect to the software and accompanying documentation are set out exclusively in the Software License
Agreement or in the Product Purchase Agreement that covers the documentation.
The LogLogic® Appliance-based solution enables you to capture and manage log data
from all types of sources in your enterprise. LogLogic Appliances install within 10
minutes and begin collecting and aggregating data from connected log sources
immediately.
This document enables you to quickly set up your LogLogic Appliance and provides
descriptions of the Appliance hardware configurations.
Related Documents
The LogLogic documentation is available on the Solutions CD or on the LogLogic
Technical Support website – http:
//
www.loglogic.com/services/support. The
documentation includes Portable Document Format (PDF) files and Online Help
accessible from the LogLogic user interface.
To read the PDF documentation, you need a PDF file viewer such as Adobe Acrobat
Reader. You can download the Adobe Acrobat Reader at
http:
//
www.adobe.com.
The following documents contain additional information about the LogLogic Appliances:
LogLogic Release Notes — Provides information specific to the release including product
information, new features and functionality, resolved issues, known issues and any
late-breaking information. Check the LogLogic Support Web Site periodically for
further updates.
LogLogic Upgrade Guide—Describes how to upgrade the LogLogic Appliance software.
LogLogic Administration Guide — Describes how to administer the LogLogic solution
including managing users, managing log data storage, and managing new log sources
(devices).
LogLogic Management Appliance Guide — Describes how to manage multiple distributed
Appliances using an MA 2010 Appliance.
LogLogic Data Migration Guide — Describes how to migrate data from one LogLogic
Appliance to another.
LogLogic User Guide — Describes how to use the LogLogic solution, including for
managing reports, managing alerts, and performing searches.
Quick Start Guide5
Technical Support
LogLogic Log Source Configuration Guide — Describes how to support log data from
various log sources. There is a separate manual for each supported log source. These
documents include documentation on LogLogic Collectors as well as documentation
on how to configure log sources to work with the LogLogic solution.
LogLogic Collector Guides — Describe how to implement support for using a LogLogic
Collector for specific log sources such as IBM i5/OS and ISS Site Protector.
LogLogic Web Services API Implementation Guide — Describes how to implement the
LogLogic Web Services APIs to manage reports, manage alerts, perform searches, and
administrate the system.
LogLogic Syslog Alert Message Format Quick Reference Guide — Describes the LogLogic
Syslog alert message format.
LogLogic Online Help — Describes the Appliance user interface, including descriptions
for each screen, tab, and element in the Appliance.
Technical Support
LogLogic is committed to the success of our customers and to ensuring our products
improve customers' ability to maintain secure, reliable networks. Although LogLogic
products are easy to use and maintain, occasional assistance might be necessary. LogLogic
provides timely and comprehensive customer support and technical assistance from
highly knowledgeable, experienced engineers who can help you maximize the
performance of your LogLogic Appliances.
To reach the LogLogic Support team:
Te lep h o ne :
Toll Free — 1-800-957-LOGS
Local —1-408-834-7480
Europe, Middle East, Africa (EMEA) or Asia Pacific (APAC): + 44 (0) 207 1170075 or
+44 (0) 8000 669970
Email: support@loglogic.com
Support Website: http:
//
www.loglogic.com/services/support
When contacting Customer Support, be prepared to provide the following information:
Your name, e-mail address, phone number, and fax number
Your company name and company address
Your machine type and release version
Serial number located on the back of the Appliance or the eth0 MAC address
A description of the problem and the content of pertinent error messages (if any)
6Quick Start Guide
Documentation Support
Your feedback on LogLogic documentation is important to us. Send e-mail to
DocComments@loglogic.com if you have questions or comments. Your comments will be
reviewed and addressed by the LogLogic technical writing team.
In your e-mail message, please indicate the software name and version you are using, as
well as the title and document date of your documentation.
Conventions
LogLogic documentation uses the following conventions:
Caution: Highlights important situations that could potentially damage data or cause system failure.
IMPORTANT! Highlights key considerations to keep in mind.
About This Guide
Note: Provides additional information that is useful but not always essential.
Tip: Highlights guidelines and helpful hints.
This guide also uses the following conventions to highlight code and command-line
elements:
Monospace is used for programming elements (such as code fragments, objects,
methods, parameters, and HTML tags) and system elements (such as file names,
directories, paths, and URLs).
Monospace bold is used to distinguish system prompts or screen output from user
responses, as in this example:
username: system
home directory: home\app
Monospace italic is used for placeholders, which are general names that you
replace with names specific to your site, as in this example:
LogLogic_home_directory\upgrade\
Straight brackets signal options in command-line syntax.
ls [-AabCcdFfgiLlmnopqRrstux1] [-X attr] [path ...]
Quick Start Guide7
Conventions
8Quick Start Guide
CHAPTER 1
Setting Up the LogLogic Appliance
The LogLogic Quick Start Guide provides simple instructions for quickly getting started
with a new Appliance.
After you install the new LogLogic Appliance in its rack and it has power, set it up as
described in this chapter.
You can set up the Appliance either using the user interface via a web browser, or using
the command line interface via a console connection:
Setting Up the Appliance using the Console . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 11
Once the Appliance is running, you want to configure it for your specific needs. For more
information, see the LogLogic Users Guide or LogLogic Administration Guide.
To upgrade an existing Appliance, see the LogLogic Upgrade Guide.
Setting Up the Appliance with a Browser
To set up a LogLogic Appliance using the browser:
Step 1: Connecting the Appliance to a Network on page 9
Step 2: Logging in to the Appliance on page 10
Step 3: Configuring Log Source Auto-Identification on page 10
Step 4: Configuring Network Settings on page 10
Step 5: Setting the Time Zone and Time on page 11
Step 1: Connecting the Appliance to a Network
Connect the Appliance to a network where you can access a 10.0.0.x network address
using a class “C” subnet mask (255.255.255.0). You can also connect to the Appliance via
an Ethernet crossover cable.
Note: The Appliance’s Default IP Address is 10.0.0.11. The Eth0 port needs to be connected to the
network because that is the only port configured on the Appliance by default at startup. The other
ports will work unless the Eth0 port is connected to the network.
Quick Start Guide9
Setting Up the Appliance with a Browser
Step 2: Logging in to the Appliance
To log in to the Appliance server
1. Open Internet Explorer on your workstation and connect to the Appliance server by
entering https://10.0.0.11 in the browser address line.
2. Click YES to accept the certificate.
A login screen appears.
3. Enter the default username (admin) and password (admin).
The Appliance displays the End User License Agreement (EULA).
4. Accept the EULA.
The Appliance asks you to enter a new password, containing at least one number.
5. Enter a new password.
The Appliance displays the navigation menu, and a warning that the time is not yet set
on the Appliance. You can ignore this warning; it is addressed later in this procedure.
LogLogic recommends that you also create a secondary administrative account. You can
do this now or later. To add more user accounts, see the Managing Users chapter in the
LogLogic Administration Guide.
To change the admin password later, see the Setting User Preferences chapter in the
LogLogic Users Guide.
1. Expand the Administration option in the left margin of the browser window.
2. Under Administration, select System Settings.
The General tab appears.
3. Next to Auto-identify Log Sources, click Yes.
4. If you want to enable SSH connections to the Appliance, next to Enable SSH Daemon
at Startup, click Yes.
5. Click Update.
Step 4: Configuring Network Settings
1. Click on the System Settings under Administration.
2. Click on the Network tab.
3. Type in the appropriate network information then click Update.
For more information on network settings, see the online help or the System Settings
chapter in the LogLogic Administration Guide.
4. Click Reboot Later. The reboot after changing Time settings satisfies the need to
reboot.
10Quick Start Guide
CHAPTER 1 Setting Up the LogLogic Appliance
Step 5: Setting the Time Zone and Time
1. Under Administration > System Settings, select the Time tab.
2. Select the appropriate Time Zone from the Time Zone drop-down menu.
IMPORTANT! You must select the appropriate time zone for your Appliance. If you select an
incorrect time zone, your reports and CLI access might not function properly.
3. Select Update Time to define how to synchronize your local time.
4. Select how to update the Appliance time:
(Recommended) Select NTP Server to enter a Hostname or IP address for your NTP
server. This is the time server by which you want to synchronize your local time.
If you have multiple Appliances connected together, you must set up a common
external NTP server for all Appliances to ensure that the time on all Appliances is
synchronized. Ideally, this is the same NTP server used by the entire data center.
If you have no access to an external NTP server, you can use the Appliance running
as a Management Station as the common NTP server. All Appliances must have
their time settings in sync.
It is important to have an NTP server set up for a single Appliance as well.
Select Specify Time and manually define the system time (MMDDhhmmYY.ss).
5. Click Update to save your changes.
The Appliance prompts you that an immediate reboot is required.
6. Click OK to let the Appliance reboot for changes to take effect.
IMPORTANT! New settings do not go into effect until the Appliance is restarted.
Setting Up the Appliance using the Console
To set up a LogLogic Appliance using the console, you use a serial connection to log in
and set network and time zone settings, verify and save the settings, and reboot the
Appliance.
Note: For more information on CLI commands, see the LogLogic Administration Guide or, once
logged in to the console, the CLI help which is available by typing help at the command prompt.
Using the Console to Set Up the Appliance
1. Using a laptop or other terminal device, connect the Appliance to COM1 via a null
modem cable.
2. Open a terminal utility. Use the following communication settings:
9600 baud, Null, 8 bit, 1
Quick Start Guide11
Setting Up the Appliance using the Console
Note: Use a serial console instead of an SSH connection. Network configuration changes can
disconnect an SSH connection during this procedure. In all circumstances, a serial connection
is maintained.
3. In the terminal program, log in as user root with password logapp.
a. If this is the first time you are setting up the Appliance, change the default password
to another password:
> passwd root
b. Follow the prompts, and be sure to make a note of the change. Do this for both the
CLI and shell logins.
Once logged in, you are automatically set to read/write mode. There is no read-only
console login.
4. Configure the network settings:
a. Set the Appliance IP address and interface network settings:
# set ip IP-address subnet-maskdefault-gateway interface-name
If you are bonding two interfaces together, use interface-name to indicate bond0
or bond1.
Example:
set ip 10.9.3.250 255.255.255.0 10.9.3.1 eth0
b. Set the DNS server IP address:
# set dnsDNS-IP-address
Example:
set dns 10.1.1.5
5. Set the local time zone.
set timezone <Enter>
From the displayed menu, select the time zone where this Appliance is located.
6. Verify your settings:
> show changes
7. Save your changes:
> save
This updates the necessary files so that the network setting changes are permanent.
IMPORTANT! New settings do not go into effect until the Appliance is restarted.
8. View the new network settings to verify they are correct:
> show
9. Restart the network interface:
> network restart
12Quick Start Guide
CHAPTER 1 Setting Up the LogLogic Appliance
10. Verify that the current running network settings are correct:
> show
11. (Highly recommended) Set up an NTP server, using the IP address or DNS name of the
NTP server:
set ntpserver time.nist.gov
12. Either reboot or halt the Appliance.
To reboot the Appliance type system reboot.
To halt the Appliance type system halt and wait for approximately 2 minutes for
the Appliance to cease operation before removing power.
CAUTION: When powering down the appliance it is important to follow a proper shutdown
procedure. Failure to comply could cause a corrupted file system, loss of data or a failure to
boot the Appliance.
Quick Start Guide13
Setting Up the Appliance using the Console
14Quick Start Guide
APPENDIX A
External Hardware Descriptions
This appendix provides a series of graphics displaying the external hardware and
provides the hardware specifications for the LogLogic™ family of products. Sorted by
Appliance family, every model is described.