Skip to content

Commit 5bdd487

Browse files
authored
Update Saltstack deployment instructions and troubleshooting steps
1 parent 6711278 commit 5bdd487

File tree

1 file changed

+27
-9
lines changed

1 file changed

+27
-9
lines changed

defender-endpoint/linux-install-with-saltack.md

Lines changed: 27 additions & 9 deletions
Original file line numberDiff line numberDiff line change
@@ -31,6 +31,7 @@ ms.date: 12/04/2024
3131
3232
This article describes how to deploy Defender for Endpoint on Linux using Saltstack. A successful deployment requires the completion of all of the following tasks:
3333

34+
- [Prerequisites and system requirements](#Prerequisites and system requirements)
3435
- [Download the onboarding package](#download-the-onboarding-package)
3536
- [Create Saltstack state files](#create-saltstack-state-files)
3637
- [Deployment](#deployment)
@@ -92,18 +93,20 @@ There are two ways you can create the Saltstack state files:
9293
```
9394

9495

95-
1. Create the state file `/srv/salt/install_mdatp.sls` with the following content. The same can be downloaded from [GitHub](https://github.com/microsoft/mdatp-xplat/blob/master/linux/installation/third_party_installation_playbooks/salt.install_mdatp_simplified.sls)
96+
2. Create the state file `/srv/salt/install_mdatp.sls` with the following content. The same can be downloaded from [GitHub](https://github.com/microsoft/mdatp-xplat/blob/master/linux/installation/third_party_installation_playbooks/salt.install_mdatp_simplified.sls)
9697

9798
```bash
9899
#Download the mde_installer.sh: https://github.com/microsoft/mdatp-xplat/blob/master/linux/installation/mde_installer.sh
99100
install_mdatp_package:
100-
cmd.run:
101-
- name: /srv/salt/mde/mde_installer.sh --install --onboard /srv/salt/mde/mdatp_onboard.json
102-
- shell: /bin/bash
103-
- unless: 'pgrep -f mde_installer.sh'
101+
cmd.run:
102+
- name: /srv/salt/mde/mde_installer.sh --install --onboard /srv/salt/mde/mdatp_onboard.json
103+
- shell: /bin/bash
104+
- unless: 'pgrep -f mde_installer.sh'
104105
```
105106

106-
107+
> [!NOTE]
108+
> The installer script also supports other parameters such as channel (insiders-fast, insiders-slow, prod (default) ), realtime protection, version, etc. To select from the list of available options, check help through the following command:
109+
>```./mde_installer.sh --help```
107110

108111
### Create Saltstack state files by manually configuring repositories
109112

@@ -254,7 +257,7 @@ In this step, you create a SaltState state file in your configuration repository
254257
- name: mdatp
255258
```
256259
257-
## Deployment
260+
## Deploy Defender on Endpoint using the state files created above, applicable to both methods
258261
259262
In this step, you apply the state to the minions. The following command applies the state to machines with the name that begins with `mdetest`.
260263
@@ -284,9 +287,24 @@ In this step, you apply the state to the minions. The following command applies
284287
salt 'mdetest*' state.apply uninstall_mdatp
285288
```
286289
287-
## Log installation issues
290+
## Troubleshoot installation issues
291+
292+
To troubleshoot issues:
293+
294+
1. For information on how to find the log that's generated automatically when an installation error occurs, see [Log installation issues](linux-resources.md#log-installation-issues).
295+
2. For information about common installation issues, see [Installation issues](/defender-endpoint/linux-support-install).
296+
3. If the health of the device is `false`, see [Defender for Endpoint agent health issues](/defender-endpoint/health-status).
297+
4. For product performance issues, see [Troubleshoot performance issues](/defender-endpoint/linux-support-perf).
298+
5. For proxy and connectivity issues, see [Troubleshoot cloud connectivity issues](/defender-endpoint/linux-support-connectivity).
299+
300+
To get support from Microsoft, open a support ticket, and provide the log files created by using the [client analyzer](/defender-endpoint/run-analyzer-macos-linux).
301+
302+
## How to configure policies for Microsoft Defender on Linux
303+
304+
You can configure antivirus or EDR settings on your endpoints using any of the following methods:
288305

289-
For more information on how to find the automatically generated log that's created by the installer when an error occurs, see [Log installation issues](linux-resources.md#log-installation-issues).
306+
- See [Set preferences for Microsoft Defender for Endpoint on Linux](/defender-endpoint/linux-preferences).
307+
- See [security settings management](/mem/intune/protect/mde-security-integration) to configure settings in the Microsoft Defender portal.
290308

291309
## Operating system upgrades
292310

0 commit comments

Comments
 (0)