Skip to content

Commit 4071419

Browse files
committed
Merge remote-tracking branch 'upstream/main' into delete-include-files
2 parents e100954 + 66088d0 commit 4071419

File tree

7 files changed

+39
-75
lines changed

7 files changed

+39
-75
lines changed

articles/ddos-protection/test-through-simulations.md

Lines changed: 1 addition & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -25,6 +25,7 @@ You can only simulate attacks using our approved testing partners:
2525
- [BreakingPoint Cloud](https://www.ixiacom.com/products/breakingpoint-cloud): a self-service traffic generator where your customers can generate traffic against DDoS Protection-enabled public endpoints for simulations.
2626
- [Red Button](https://www.red-button.net/): work with a dedicated team of experts to simulate real-world DDoS attack scenarios in a controlled environment.
2727
- [RedWolf](https://www.redwolfsecurity.com/services/#cloud-ddos) a self-service or guided DDoS testing provider with real-time control.
28+
- [MazeBolt](https://mazebolt.com):The RADAR™ platform continuously identifies and enables the elimination of DDoS vulnerabilities – proactively and with zero disruption to business operations.
2829

2930
Our testing partners' simulation environments are built within Azure. You can only simulate against Azure-hosted public IP addresses that belong to an Azure subscription of your own, which will be validated by our partners before testing. Additionally, these target public IP addresses must be protected under Azure DDoS Protection. Simulation testing allows you to assess your current state of readiness, identify gaps in your incident response procedures, and guide you in developing a proper [DDoS response strategy](ddos-response-strategy.md).
3031

articles/governance/machine-configuration/whats-new/migrating-from-azure-automation.md

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -102,7 +102,7 @@ $getParams = @{
102102
AutomationAccountName = '<your-automation-account-name>'
103103
}
104104
105-
Get-AzAutomationDscConfiguration @params
105+
Get-AzAutomationDscConfiguration @getParams
106106
```
107107

108108
```Output

articles/operator-insights/ingestion-agent-release-notes.md

Lines changed: 6 additions & 2 deletions
Original file line numberDiff line numberDiff line change
@@ -17,7 +17,9 @@ This page is updated for each new release of the ingestion agent, so revisit it
1717

1818
## Version 2.0.0 - March 2024
1919

20-
Download for [RHEL8](https://download.microsoft.com/download/8/2/7/82777410-04a8-4219-a8c8-2f2ea1d239c4/az-aoi-ingestion-2.0.0-1.el8.x86_64.rpm).
20+
Supported distributions:
21+
- RHEL 8
22+
- RHEL 9
2123

2224
### Known issues
2325

@@ -34,7 +36,9 @@ None
3436

3537
## Version 1.0.0 - February 2024
3638

37-
Download for [RHEL8](https://download.microsoft.com/download/c/6/c/c6c49e4b-dbb8-4d00-be7f-f6916183b6ac/az-aoi-ingestion-1.0.0-1.el8.x86_64.rpm).
39+
Supported distributions:
40+
- RHEL 8
41+
- RHEL 9
3842

3943
### Known issues
4044

articles/operator-insights/set-up-ingestion-agent.md

Lines changed: 12 additions & 38 deletions
Original file line numberDiff line numberDiff line change
@@ -65,34 +65,6 @@ We recommend that you restrict the following:
6565

6666
When using an Azure VM, also follow all recommendations from Microsoft Defender for Cloud. You can find these recommendations in the portal by navigating to the VM, then selecting Security.
6767

68-
## Download the RPM for the agent
69-
70-
Download the RPM for the ingestion agent using the details you received as part of the [Azure Operator Insights onboarding process](overview.md#how-do-i-get-access-to-azure-operator-insights) or from [https://go.microsoft.com/fwlink/?linkid=2260508](https://go.microsoft.com/fwlink/?linkid=2260508).
71-
72-
Links to the current and previous releases of the agents are available below the heading of each [release note](ingestion-agent-release-notes.md). If you're looking for an agent version that's more than six months old, check out the [release notes archive](ingestion-agent-release-notes-archive.md).
73-
74-
### Verify the authenticity of the ingestion agent RPM (optional)
75-
76-
Before you install the RPM, you can verify the signature of the RPM with the [Microsoft public key file](https://packages.microsoft.com/keys/microsoft.asc) to ensure it hasn't been corrupted or tampered with.
77-
78-
To do this, perform the following steps:
79-
80-
1. Download the RPM.
81-
1. Download the provided public key
82-
```
83-
wget https://packages.microsoft.com/keys/microsoft.asc
84-
```
85-
1. Import the public key to the GPG keyring
86-
```
87-
gpg --import microsoft.asc
88-
```
89-
1. Verify the RPM signature matches the public key
90-
```
91-
rpm --checksig <path-to-rpm>
92-
```
93-
94-
The output of the final command should be `<path-to-rpm>: digests signatures OK`
95-
9668
## Set up authentication to Azure
9769

9870
The ingestion agent must be able to authenticate with the Azure Key Vault created by the Data Product to retrieve storage credentials. The method of authentication can either be:
@@ -186,7 +158,6 @@ Repeat these steps for each VM onto which you want to install the agent.
186158
```
187159
sudo dnf install systemd logrotate zip
188160
```
189-
1. Obtain the ingestion agent RPM and copy it to the VM.
190161
1. If you're using a service principal, copy the base64-encoded P12 certificate (created in the [Prepare certificates](#prepare-certificates-for-the-service-principal) step) to the VM, in a location accessible to the ingestion agent.
191162
1. Configure the agent VM based on the type of ingestion source.
192163
@@ -222,22 +193,26 @@ Repeat these steps for each VM onto which you want to install the agent.
222193
223194
---
224195
225-
## Ensure that VM can resolve Microsoft hostnames
196+
## Ensure that the VM can resolve Microsoft hostnames
226197
227198
Check that the VM can resolve public hostnames to IP addresses. For example, open an SSH session and use `dig login.microsoftonline.com` to check that the VM can resolve `login.microsoftonline.com` to an IP address.
228199
229200
If the VM can't use DNS to resolve public Microsoft hostnames to IP addresses, [map the required hostnames to IP addresses](map-hostnames-ip-addresses.md). Return to this procedure when you have finished the configuration.
230201
231202
## Install the agent software
232203
233-
Repeat these steps for each VM onto which you want to install the agent:
204+
The agent software package is hosted on the "Linux software repository for Microsoft products" at [https://packages.microsoft.com](https://packages.microsoft.com)
234205
235-
1. In an SSH session, change to the directory where the RPM was copied.
236-
1. Install the RPM.
237-
```
238-
sudo dnf install ./*.rpm
239-
```
240-
Answer `y` when prompted. If there are any missing dependencies, the RPM won't be installed.
206+
**The name of the ingestion agent package is `az-aoi-ingestion`.**
207+
208+
To download and install a package from the software repository, follow the relevant steps for your VM's Linux distribution in [
209+
How to install Microsoft software packages using the Linux Repository](/linux/packages#how-to-install-microsoft-software-packages-using-the-linux-repository).
210+
211+
For example, if you are installing on a VM running Red Hat Enterprise Linux (RHEL) 8, follow the instructions under the [Red Hat-based Linux distributions](/linux/packages#red-hat-based-linux-distributions) heading, substituting the following parameters:
212+
213+
- distribution: `rhel`
214+
- version: `8`
215+
- package-name: `az-aoi-ingestion`
241216
242217
## Configure the agent software
243218
@@ -344,7 +319,6 @@ The configuration you need is specific to the type of source and your Data Produ
344319
```
345320
sudo systemctl enable az-aoi-ingestion.service
346321
```
347-
1. Save a copy of the delivered RPM – you need it to reinstall or to back out any future upgrades.
348322
349323
## Related content
350324

articles/operator-insights/upgrade-ingestion-agent.md

Lines changed: 16 additions & 31 deletions
Original file line numberDiff line numberDiff line change
@@ -14,49 +14,31 @@ ms.date: 02/29/2024
1414

1515
The ingestion agent is a software package that is installed onto a Linux Virtual Machine (VM) owned and managed by you. You might need to upgrade the agent.
1616

17-
In this article, you'll upgrade your ingestion agent and roll back an upgrade.
17+
This article describes how to upgrade your ingestion agent, and how to roll back an upgrade.
1818

1919
## Prerequisites
2020

21-
Obtain the latest version of the ingestion agent RPM from [https://go.microsoft.com/fwlink/?linkid=2260508](https://go.microsoft.com/fwlink/?linkid=2260508).
21+
Decide which version of the ingestion agent you would like to upgrade to. If you don't specify a version when you upgrade, you'll upgrade to the most recent version.
2222

23-
Links to the current and previous releases of the agents are available below the heading of each [release note](ingestion-agent-release-notes.md). If you're looking for an agent version that's more than 6 months old, check out the [release notes archive](ingestion-agent-release-notes-archive.md).
23+
See [What's new with Azure Operator Insights ingestion agent](ingestion-agent-release-notes.md) for a list of recent releases and to see what's changed in each version. If you're looking for an agent version that's more than six months old, check out the [release notes archive](ingestion-agent-release-notes-archive.md).
2424

25-
### Verify the authenticity of the ingestion agent RPM (optional)
26-
27-
Before you install the RPM, you can verify the signature of the RPM with the [Microsoft public key file](https://packages.microsoft.com/keys/microsoft.asc) to ensure it has not been corrupted or tampered with.
28-
29-
To do this, perform the following steps:
30-
31-
1. Download the RPM.
32-
1. Download the provided public key
33-
```
34-
wget https://packages.microsoft.com/keys/microsoft.asc
35-
```
36-
1. Import the public key to the GPG keyring
37-
```
38-
gpg --import microsoft.asc
39-
```
40-
1. Verify the RPM signature matches the public key
41-
```
42-
rpm --checksig <path-to-rpm>
43-
```
44-
45-
The output of the final command should be `<path-to-rpm>: digests signatures OK`
25+
If you would like to verify the authenticity of the ingestion agent package before upgrading, see [How to use the GPG Repository Signing Key](/linux/packages#how-to-use-the-gpg-repository-signing-key).
4626

4727
## Upgrade the agent software
4828

4929
To upgrade to a new release of the agent, repeat the following steps on each VM that has the old agent.
5030

51-
1. Ensure you have a copy of the currently running version of the RPM, in case you need to roll back the upgrade.
52-
1. Copy the new RPM to the VM.
53-
1. Connect to the VM over SSH, and change to the directory where the RPM was copied.
31+
1. Connect to the VM over SSH.
5432
1. Save a copy of the existing */etc/az-aoi-ingestion/config.yaml* configuration file.
55-
1. Upgrade the RPM.
33+
1. Upgrade the agent using your VM's package manager. For example, for Red Hat-based Linux Distributions:
34+
```
35+
sudo dnf upgrade az-aoi-ingestion
5636
```
57-
sudo dnf install ./*.rpm
37+
Answer `y` when prompted.
38+
1. Alternatively, to upgrade to a specific version of the agent, specify the version number in the command. For example, for version 2.0.0 on a RHEL8 system, use the following command:
39+
```
40+
sudo dnf install az-aoi-ingestion-2.0.0
5841
```
59-
Answer `y` when prompted.  
6042
1. Make any changes to the configuration file described by your support contact or the documentation for the new version. Most upgrades don't require any configuration changes.
6143
1. Restart the agent.
6244
```
@@ -72,8 +54,11 @@ To upgrade to a new release of the agent, repeat the following steps on each VM
7254
7355
If an upgrade or configuration change fails:
7456
57+
1. Downgrade back to the previous version by reinstalling the previous version of the agent. For example, to downgrade to version 1.0.0 on a RHEL8 system, use the following command:
58+
```
59+
sudo dnf downgrade az-aoi-ingestion-1.0.0
60+
```
7561
1. Copy the backed-up configuration file from before the change to the */etc/az-aoi-ingestion/config.yaml* file.
76-
1. Downgrade back to the original RPM.
7762
1. Restart the agent.
7863
```
7964
sudo systemctl restart az-aoi-ingestion.service

0 commit comments

Comments
 (0)