Skip to main content

How to ship logs to your collector using Orbital on Linux

This guide will walk you through all the steps you need to know to deploy the Orbital Agent as a log shipper on Linux

Written by Alan Butcher
Updated today

This deployment requires one of our Advanced or Enterprise packages

Before you get started

Before shipping logs to our SIEM platform, you must first deploy a log collector. If you already have a log collector deployed, please follow the steps outlined below.

System requirements

Before you begin, the Orbital Agent has the following system requirements. Please ensure the devices you're deploying to meet these requirements.

Operating System

Red Hat Enterprise Linux 9.x

AlmaLinux 9.x

Rocky Linux 9.x

Ubuntu 22.04 LTS (Jammy Jellyfish)

Ubuntu 24.04 LTS (Noble Numbat)

CPU

1 GHz dual-core processor

RAM

Minimum 4GB

Disk

500MB free disk space

Manual Deployment

Deploying the Orbital Agent into your environment as a log shipper is super straightforward.

Please do not change the installer filename, as this includes your unique installation key. Doing so will cause the installation to fail.

  1. Log in to your my.defense.com account

  2. Select Endpoints from the navigation on the left-hand side

  3. Click Orbital Agent from the sub-navigation

  4. From the Orbital Agent index page, click Installation Links in the top right-hand corner

  5. You'll then be presented with a modal where you can select the Endpoint Group, and click Download Installer for Linux

  6. Launch Terminal (Ctrl+Alt+T) and navigate to where your Orbital installer is located

  7. Next, make the installer executable using sudo chmod +x orbital-install-[encypted_key]

  8. Run the installer sudo ./orbital-install-[encrypted_key] (replacing encrypted_key with the encrypted key, which is part of the filename, for example orbital-install-[Wjrh5gjrfh5fhryE4ue])

  9. Once you've run the installer, you'll be presented with the installation interface. Click Next to begin the installation

  10. Select your installation folder; this will default to /opt/Defensecom/Orbital

  11. Click Next to continue the installation

  12. From the Select Components section, select the Log Generation component, and click Next

  13. Click Install

  14. Finally, click Finish, and the installation is complete

And that's it! You've successfully installed Orbital as a Log shipper on a Linux machine 🎉

Did this answer your question?