Start proactively finding and fixing infrastructure risks today.
Activate your evaluation.
Note: If you have purchased an Insights subscription, skip this step and proceed to the next step.
To begin evaluating Red Hat Insights, visit https://access.redhat.com/insights/evaluation to activate any available evaluations associated with your account. This step must be completed prior to any system registration with Insights.
Register all systems with Red Hat Subscription Manager for updates and to resolve software dependencies.
[root@server ~]# subscription-manager register --auto-attachNote: You must have RHEL 6 and later, or RHEL 7 and later, to use Insights.
Install Insights and register your system to Red Hat Insights.
To install Insights and register a system manually
[root@server ~]# yum install insights-client[root@server ~]# insights-client --registerNote: If you have a web-based proxy between your system and the Internet, you can configure the Insights client to connect through it. For more information, refer to How to access Red Hat Insights through a firewall/Proxy?
See your results.
After registration, the Insights client will upload initial system metadata to Red Hat Insights. You should be able to immediately see your system in the Insights user interface at https://access.redhat.com/insights/ .
Pre-installation checks:
Activate your evaluation.
Note: If you have purchased an Insights subscription, skip this step and proceed to the next step.
To begin evaluating Red Hat Insights, visit https://access.redhat.com/insights/evaluation to activate any available evaluations associated with your account. This step must be completed prior to any system registration with Insights.
Enable Red Hat Insights.
Log in to the Satellite administrator account. Navigate to Admin --> Insights. Before enabling Insights, click Test Conection to Red Hat Insights API. If the test is successful, a circled green checkmark appears.
If unsuccessful, a red circle and a log appear. When the test is successful, select Enable Insights Service then click Update. The Red Hat Insights GUI pieces now appear in Satellite.
Install Insights and register your system to Red Hat Insights.
Install and register a system manually:
[root@server ~]# yum install insights-client[root@server ~]# insights-client --registerInstall and register a system through Red Hat Satellite:
Navigate to Systems > Insights > Setup as an Organization Administrator. Select the systems to install the redhat-access-insights RPM onto, then click "Apply."
Check the status of the RPM installation by navigating to Schedule > Pending Actions.
The RPM installation will be shown on the Completed Actions page when finished.
See your results.
Shortly after you execute
insights-client --registeron at least one machine, navigate to Systems > Overview in Satellite. Find the system you registered. The status should either be a green check or a red exclamation symbol.
If you see a red exclamation symbol, click it to see reports about your system.
To see an overview of all system reports, navigate to Systems > Insights > Overview.
Pre-installation checks:
Activate your evaluation.
Note: If you have purchased an Insights subscription, skip this step and proceed to the next step.
To begin evaluating Red Hat Insights, visit https://access.redhat.com/insights/evaluation to activate any available evaluations associated with your account. This step must be completed prior to any system registration with Insights.
Subscribe Insights clients to Satellite server.
This step is typically already performed as part of a Satellite host configuration. Only RHEL hosts registered to the a particular Satellite server will have reports available in the Satellite UI.
Verify connection to Red Hat Insights.
Verify that the Satellite server can successfully communicate with Red Hat Insights. In the Satellite UI, navigate to Insights > Manage. Verify that the engine connection status is "Connected" and the account number displayed is correct for your organization.
Install Insights and register your system to Red Hat Insights.
To install and register a system manually:
[root@server ~]# yum install insights-client[root@server ~]# insights-client --registerSee your results.
After registration, the Insights client will upload initial system metadata to Red Hat Insights. You can immediately see your system in the Satellite UI or in the Insights user interface at https://access.redhat.com/insights/ (if the Show Satellite Systems setting is enabled for the account).
Assign Red Hat Insights roles to users.
By default, only administrators can view Insights Report and Configuration screens. However, you can give non-admin users access to the Insights screens by assigning them the appropriate roles as follows:
To give users access to all Insights screens, including the Manage screen, assign them the Insights Admin role. Users must also be granted the view_content_host permission.
To give users Insights report and rule viewing access, assign them the Insights Viewer role. These users must also be granted the view_content_host permission.
For more information on roles, refer to the official Satellite 6 documentation .
Pre-installation checks:
Activate your evaluation.
Note: If you have purchased an Insights subscription, skip this step and proceed to the next step.
To begin evaluating Red Hat Insights, visit https://access.redhat.com/insights/evaluation to activate any available evaluations associated with your account. This step must be completed prior to any system registration with Insights.
Register all systems for updates in order to resolve software dependencies.
[root@server ~]# subscription-manager register --auto-attachVerify CloudForms appliance registration.
All appliances configured for the UI role to view Red Hat Insights reports must be registered for Red Hat updates. In the CloudForms Management Engine UI, navigate to Configure > Configuration. Select a zone and verify that the appropriate appliance is registered.
Note: The Satellite Server organization to which the CloudForms appliance is registered must have Insights enabled.
Configure Smart State Analysis.
Configure the Smart State Analysis profile for your appliances to collect the contents of the file /
etc/insights-client/machined-id.
Install Insights and register your system to Red Hat Insights.
Important: All virtual machines must be registered to the same Red Hat account as the CloudForms appliance.
Install and register a system manually:
[root@server ~]# yum install insights-client[root@server ~]# insights-client --registerNote: If you have a web-based proxy between your system and the Internet, you can configure the Insights client to connect through it. For more information, refer to How to access Red Hat Insights through a firewall/Proxy?
Run Smart State Analysis on RHEL virtual machines.
A Smart State Analysis must be run once on all RHEL virtual machines you have registered to Red Hat Insights. This step is only required once. If a new virtual machine is created afterward, then a Smart State Analysis need only be run on that new virtual machine after it has been registered to Insights.
For more information on how to configure and run Smart State Analysis, see the official CloudForms documentation .
See your results.
After registration, the Insights client will upload initial system metadata to Red Hat Insights. You should be able to immediately see your system in the Insights user interface at https://access.redhat.com/insights/ .
Assign Red Hat Insights to user roles.
By default, only super administrators can view Insights Report and Configuration screens. You can give non-admin users access to the Insights screens by assigning the appropriate features to their roles.
In addition to the feature controls above, a user can only view Insights reports on those virtual machines to which the user has permission to view in CloudForms.
Pre-installation checks:
Before installing Red Hat Insights, the following prerequisites must be met:
OpenShift deployment must be version 3.2 or later.
Firewall rules must allow Red Hat Insights to make outbound connections to https://api.redhat.com:443 and https://cert-api.access.redhat.com:443 .
Activate your evaluation.
Note: If you have purchased an Insights subscription, skip this step and proceed to the next step.
To begin evaluating Red Hat Insights, visit https://access.redhat.com/insights/evaluation to activate any available evaluations associated with your account. This step must be completed prior to any system registration with Insights.
Install the Insights and register a system to Red Hat Insights.
Install the Insights client using the following commands, and use a unique cluster identifier of your choosing:
[root@server ~]$ sudo yum install insights-client[root@server ~]$ sudo insights-client --register --group=<Cluster-ID>You will use the unique cluster ID to filter nodes in the Red Hat Insights UI on the Customer Portal. Creating a unique cluster ID of your choice will simplify locating it among the systems listed in Insights.
Note: If you have a web-based proxy between your system and the Internet, you can configure the Insights client to connect through it. For more information, refer to How to access Red Hat Insights through a firewall/Proxy?
Repeat steps 1 & 2.
Repeat steps 1 and 2 on all nodes.
Pre-installation checks:
Important: Red Hat Insights for Red Hat OpenShift image scanning is available as a Technology Preview feature. As such, it is not suitable for production environments. Learn more about Technology Preview features.
1. If you are using Red Hat Subscription Manager and haven't refreshed the channels recently, or the required repo is reporting as unavailable when attempting to add the repo, you may need to run:
# subscription-manager refreshOn the Openshift Master Node (this can be run from any RHEL 7 client host with the Openshift client “oc” installed):
2. Enable the Red Hat Insights Repository and install the Red Hat Insights client package:
# subscription-manager repos --enable=rhel-7-server-insights-3-rpms3. Install the CLI application RPM:
# yum install insights-ocp-cliDeploying the scanning application
1. Log in to the OpenShift cluster as the cluster administrator:
# oc login2. Create an Insights scanning project and initiate a scan:
# insights-ocp-cli install --user <redhat-user-name> --password <redhat-password>Note: The default scanning limit is two nodes at a time.
Image scanning operations
Start Scan
# insights-ocp-cli start-scanStop Scan
# insights-ocp-cli stop-scanViewing scan results
The results for image scanning are published in the insights-ocp-ui application running within the Openshift cluster. Navigate to the insights-scan project and click on the insights-ocp-ui application link.
Oauth is enabled in the Insight OCP UI and allows you to log in using your OpenShift credentials.
Following an image scan, it will appear in the list of scanned images in the Insights OCP UI.
Click on the image to view details of the image scan. Select an issue to view the details of that issue, or click Expand All to view the details of all issues found during the scan.
Uninstalling Insights
The following command will uninstall Insights from the node, as well as all data from Insights image scans.
# insights-ocp-cli uninstall
Ansible Playbook Integration
Red Hat Insights has added the ability to deploy maintenance plans as Ansible Playbooks, enabling system administrators to save time, be more productive, eliminate repetitive tasks, and reduce or eliminate errors.
The benefits of Ansible Playbooks can be enabled using the Insights UI and command line, or by using Ansible Tower.
Red Hat Insights UI
To use playbooks from the Red Hat Insights UI in Customer Portal, refer to the instructions in Creating Insights Maintenance Plans with Ansible Playbook Integration.
Ansible Tower
To use playbooks using Ansible Tower, refer to Setting up an Insights Project in the Ansible Tower User Guide.
For more information about the benefits of Ansible integration, refer to Ansible documentation.
Browse all Red Hat Insights Knowledge
Topics
Overview of Red Hat Insights
Overview
See how Red Hat Insights provides ongoing in-depth analysis of your Red Hat infrastructure to proactively identify key threats related to security, stability, and performance.