WHAT IS RED HAT INSIGHTS?

Red Hat Insights for Red Hat Enterprise Linux (RHEL) is a proactive operational efficiency and security risk management solution included in RHEL subscriptions for versions 6.4 and higher, as well as public cloud versions of RHEL. With advanced analytics, Insights helps identify and prioritize risks to your operations, security, and business. Insights also enables users to monitor for adherence to policies and understand configuration changes over time.

Key Benefits

Avoid unplanned downtime and better manage security risks

See through complexity to pinpoint risks and resolve them before an outage or breach occurs.

Understand where to focus attention

Understand crucial areas that need to be addressed, even with large and complex RHEL environments, to better manage operations and avoid “firefighting.”

Resolve potential problems quickly

Use included remediation guidance for each risk identified, without time-consuming research or trial and error efforts.

Ease administration with a single tool

Only Red Hat Insights codifies Red Hat’s expertise and makes it available to you when and where you need it on the public cloud, private cloud, or on-premises.

 Featured Resources

Insights-client Configuration Options for Red Hat Insights

This reference guide for Red Hat Insights will be updated with any client configuration parameter changes as they are made available.
Learn how Red Hat protects and handles your data to deliver Insights for your systems.

Get Started with Red Hat Insights

Register

Register your systems by following the instructions below or with our Insights registration assistant.

Launch Registration Assistant

Review

Identify systems with security, compliance, and configuration risks across your environments.

Learn more

Remediate

Remediate issues at scale with Ansible Automation Platform and Smart Management.

Learn more

Red Hat Insights on Red Hat Enterprise Linux (RHEL)

Guidance for installing Insights on RHEL systems managed by Red Hat Subscription Manager (RHSM)

Preinstallation checks:

  • You must register all Red Hat Enterprise Linux (RHEL) systems with Red Hat Subscription Manager to receive  necessary updates and to resolve software dependencies.



    [root@server ~]# subscription-manager register --auto-attach

Data collection and controls

Red Hat Insights provides a mechanism for users to obtain actionable intelligence regarding suggested improvements to deployed Red Hat software.

  1. 1

    Install the Red Hat Insights client and register your systems to Insights

    Use the automated installation tools to install and register on many systems, or use the manual installation instructions for single-system installations.

    • Automated Installation

      Use a configuration management tool to automate installation and registration.
      Note: You can automate the installation and registration of systems with Ansible, included with your Red Hat Enterprise Linux entitlement.


      Ansible
      1. Download the Insights-client playbook: Download
      2. Install Ansible and get started
      3. Configure the Insights-playbook
      Puppet

      If you are using Red Hat Satellite’s configuration management provided by Puppet this process can be automated by applying the preinstalled Puppet class access_insights_clients. This class can be imported from the Puppet Master into the appropriate Puppet environment and applied to hosts that you wish to subscribe to Red Hat Insights.

      Download Insights-client puppet module

    • Manual Installation 


      Perform the following steps to install the client on a RHEL system and register the system to Red Hat Insights:

      RHEL 8+

      Register the system to Red Hat Insights.




      ​​[root@server ~]# insights-client --register
      ​​
      Note: For RHEL 8.2, Insights can be enabled at install time. Refer to the release notes for more information.


      RHEL 7 & 6
      1. Install the client on the RHEL system.



        [root@server ~]# yum install insights-client
      2. Register the system to Red Hat Insights.



        ​​[root@server ~]# insights-client --register

      Note: Red Hat Insights can be used on all Red Hat-supported versions of Red Hat Enterprise Linux, version 6.4 and later.

  2. 2

    View your results

    After registration, the Red Hat Insights client will initiate its first upload to Insights for analysis. You can view the results for a single system, and for your infrastructure of registered systems, in the Insights dashboard.

    GO TO INSIGHTS DASHBOARD

    GO TO subscriptions dashboard

Additional Information

The Compliance service relies on OpenSCAP scans and reporting. This requires you to install OpenSCAP and the SCAP Security Guide, as detailed below.

Users who are new to OpenSCAP should perform the following actions, at a minimum, in order to use the Compliance service:
1. Install the Openscap-scanner and the SCAP security guide:




​​sudo yum install openscap-scanner -y



​​sudo yum install scap-security-guide -y
                                        

Note: For more information about OpenSCAP scanner installation, see the OpenSCAP Getting Started guide.

2. Once you have policies created within Compliance, for each system, run the following command each time you wish to run a scan:




​​sudo insights-client --compliance

Note: Only the RHEL SCAP Security Guide (SSG) versions for RHEL 6, 7, and 8 are supported. The upstream SSGs are not currently supported. Red Hat recommends using the SSG version that comes preinstalled with RHEL to ensure compatibility and accurate reporting.

Red Hat Insights on Satellite Red Hat Enterprise Linux (RHEL)

Guidance for installing Insights on RHEL systems managed by Satellite

Preinstallation checks:

  • Subscribe hosts to Satellite server
    • This step is typically already performed as part of Satellite host configuration. Only RHEL hosts registered to the particular Satellite server will have reports available in the Satellite UI.
  • Verify Satellite server connection to Red Hat Insights
    • In the Satellite UI, navigate to Insights > Manage
    • Verify under Insights Engine Connection that the status is Connected and the Account Number field displays the correct information for your organization
  • Satellite organizations with Red Hat Insights must be operating in Connected mode. Any firewalls or proxies through which the Satellite server communicates to Red Hat must allow https communications to https://cert-api.access.redhat.com.

Data collection and controls:

Red Hat Insights provides a mechanism for users to obtain actionable intelligence regarding suggested improvements to deployed Red Hat software.

Learn more

  1. 1

    Install the Insights RPM and register your system to Red Hat Insights

    There are multiple ways to automate this process. We've provided several options for popular configuration management tools below:

    • Automated Installation:

      Ansible

      Deploying Red Hat Insights using the Ansible Role included with your Smart Management entitlement

      You can automate the installation and registration of hosts with Red Hat Insights using the RedHatInsights.insights-client Ansible role. For more information about adding this role to your Satellite, see Managing Ansible Roles.

      1. Add the RedHatInsights.insights-client role to the hosts. For new hosts, see Section 2.1, Creating a Host in Red Hat Satellite. For existing hosts, see Chapter 8, Using Ansible Roles.
      2. To run the RedHatInsights.insights-client role on your host, navigate to Hosts > All Hosts and click the name of the host that you want to use.
      3. Click the Run Ansible roles button.
      4. See host on the Insights > Overview page of the Satellite web UI
      Puppet

      Deploy Red Hat Insights using Puppet in Satellite

      If you are using Red Hat Satellite’s configuration management provided by Puppet this process can be automated by applying the preinstalled Puppet class access_insights_clients. This class can be imported from the Puppet Master into the appropriate Puppet environment and applied to hosts that you wish to subscribe to Red Hat Insights.

      Download Insights-client puppet module

    • Manual Installation:

      Perform the following steps to install the client on a RHEL system and register the system to Red Hat Insights:

      RHEL 8+

      Register the system to Red Hat Insights.




      ​​[root@server ~]# insights-client --register
      ​​
      Note: For RHEL 8.2, Insights can be enabled at install time. Refer to the release notes for more information.


      RHEL 7 & 6
      1. Install the client on the RHEL system.



        [root@server ~]# yum install insights-client
      2. Register the system to Red Hat Insights.



        ​​[root@server ~]# insights-client --register

      Note: Red Hat Insights can be used on all Red Hat-supported versions of Red Hat Enterprise Linux, version 6.4 and later.

  2. 2

    View your results

    After registration, the Insights client will initiate its first upload to Red Hat Insights for analysis. You can view your systems and the results of the Red Hat Insights analysis via the Insights tab within Satellite or in the Insights dashboard.

    GO TO INSIGHTS DASHBOARD

Additional Information

Assign Red Hat Insights roles to users

By default, only administrators can view Insights Report and Configuration screens. However, you can give non-administrator users access to the Insights screens by assigning them the appropriate roles as follows:

  • To give users access to all Insights screens, including the Manage screen, assign them the Insights Admin role. Users must also be granted the view_content_host permission.
  • To give users Insights report and rule viewing access, assign them the Insights Viewer role. These users must also be granted the view_content_host permission.
  • For more information on roles, refer to the official Satellite 6 documentation.

Red Hat Insights on Red Hat Enterprise Linux (RHEL) in the Public Cloud

Guidance for installing Insights on RHEL systems hosted on a Red Hat Certified Cloud and Service Provider (CCSP)

Preinstallation checks:

  • You must have a Red Hat account. If you’ve used RHEL on-demand through a public cloud marketplace but have never interacted with Red Hat directly, you can create an account by following these instructions.
  • If you’re using a Red Hat subscription to entitle your RHEL system, you must enable the subscription for Red Hat Cloud Access. Learn how in the Cloud Access documentation.
  • You must have a Red Hat account in order to use Red Hat Insights. If you have only purchased Red Hat Enterprise Linux through a public cloud marketplace, you may not have an account yet. You may create a Red Hat account by following these instructions.

Data collection and controls:

Red Hat Insights provides a mechanism for users to obtain actionable intelligence regarding suggested improvements to deployed Red Hat software.

Learn more

  1. 1

    Deploying Red Hat Insights on existing RHEL systems managed by Red Hat Subscription Management, Satellite, or cloud access

    The following guidance is for users who wish to deploy Red Hat Insights on an existing Red Hat Enterprise Linux (RHEL) system connected to Red Hat Subscription Management (RHSM), Satellite, or cloud access.

    If you wish to deploy Insights on a RHEL system purchased through a public cloud marketplace, do not use this method. See "Deploying Red Hat Insights on existing RHEL systems managed by Red Hat Update Infrastructure (RHUI)" below.

    • If using RHSM, register all systems with Red Hat for updates and to resolve software dependencies. Satellite users may skip this step.
    [root@server ~]# subscription-manager register --auto-attach

    Note: If the system can not be subscribed to RHSM, basic authentication may be leveraged for usage of the Insights client.

    • Install the client package on each system. If you’re using RHEL 8 or above, the Insights client is installed by default.
    [root@server ~]# yum install insights-client
    • Register the system to Insights
    [root@server ~]# insights-client --register
    • After registration, the Red Hat Insights client will initiate its first upload to Insights for analysis. You can view the results for a single system and for your infrastructure of registered systems in the Insights dashboard.
  2. 2

    Deploying Red Hat Insights on existing RHEL systems managed by Red Hat Update Infrastructure (RHUI)

    The following guidance is for users who wish to deploy Red Hat Insights on an existing Red Hat Enterprise Linux (RHEL) system managed by Red Hat Update Infrastructure (RHUI). This includes on-demand, hourly systems purchased from CCSP marketplace, as well as systems deployed from Red Hat Gold Images in AWS. This procedure involves the following tasks:

    • Install the client on the RHEL system.



      [root@server ~]# yum install insights-client

      Note: Install the client package on each system. If you’re using RHEL 8+, the Insights client is installed by default.

    • Configure basic authentication in /etc/insights-client/insights-client.conf.
      • Modify the auto_config= value to FALSE.
      • Add your Red Hat SSO username to username=
      • Add your Red Hat SSO password to password=
      • Save the configuration.

        Note: To read more about using Red Hat Insights with basic authentication and recommended best practices, visit our documentation.

    • Register the system to Insights.



      ​​[root@server ~]# insights-client --register
                                                                                  

      Note:


  3. 3

    View your results

    After registration, the Red Hat Insights client will initiate its first upload to Insights for analysis. You can view the results for a single system, and for your infrastructure of registered systems, in the Insights dashboard.

    GO TO INSIGHTS DASHBOARD

Creating a new Red Hat Account

If you are already using Red Hat Enterprise Linux (RHEL) on-demand through a public cloud marketplace, but have never interacted with Red Hat directly before, please follow these steps to establish an account with us to start using Red Hat Insights.

Preinstallation checks:

  1. 1

    Create a Red Hat SSO account

    In order to use Red Hat Insights, you will need to create a Red Hat SSO account if you do not already have one setup. If your organization already has a Red Hat account, you should contact your Organization Administrator to be added to the appropriate account.

    CREATE A RED HAT ACCOUNT

  2. 2

    Establish your Account

    Once an account has been created, the account must be initialized for use with Red Hat Insights. Please visit and complete the Red Hat Insights evaluation form

    The initialization of this account may take a couple of minutes or up to an hour before systems can be registered for use. If any errors occur during registration of the Insights client, or usage of cloud.redhat.com redirects to the evaluation form, please attempt again at a later time as account initialization may still be in progress.

    Note: This form refers to this process as an “evaluation” as this step is needed to initialize the new account. Red Hat Insights is included as part of Red Hat Enterprise Linux for use and will continue to be free to use after this evaluation expires.

  3. 3

    Verify access to cloud.redhat.com

    To ensure your account has been set up correctly, log into the Red Hat Insights console

    Note: If the account is still initializing after filling out the Red Hat Insights evaluation form outlined in the previous step, you may be redirected to the evaluation form; revisit cloud.redhat.com/insights later to verify the account has been established.

  4. 4

RED HAT INSIGHTS ON RED HAT ANSIBLE AUTOMATION PLATFORM

Guidance for getting started with Insights on Ansible using Automation Analytics 

What you need to get started

A Red Hat Ansible Tower instance that can reach https://cloud.redhat.com 

Learn more

Watch a brief video on how to get started

  1. 1

    Activating data collection

    Automated Activation

    As an administrator, first log into your Red Hat Ansible Tower webUI and click on the Settings button in the left menu. Next, click on the System button. 

    There are three settings you need to set here:

    1. GATHER DATA FOR AUTOMATION ANALYTICS must be set to ON
    2. RED HAT CUSTOMER USERNAME is your cloud.redhat.com username
    3. RED HAT CUSTOMER PASSWORD is your cloud.redhat.com password for your respective username

    Finally, click the SAVE button. Once you do, Red Hat Ansible Tower will sync to cloud.redhat.com up to four times a day.

    Manual Activation

    If it is desired to sync to cloud.redhat.com right away and register a system, this can be done manually on the Red Hat Ansible Tower command line.  This will allow you to verify quickly that everything is setup correctly.

    Login as the awx user or an administrative user on the control node and run the following command:

    $ sudo awx-manage gather_analytics --ship
    This command will provide output similar to the following:

    [student1@ansible ~]$ sudo awx-manage gather_analytics --ship

    /tmp/4457cd25-4722-4b62-9ae6-ce8068026bbc_2019-10-28-155420+0000.tar.gz

    shipping analytics file: /tmp/4457cd25-4722-4b62-9ae6-ce8068026bbc_2019-10-28-155420+0000.tar.gz


  2. 2

    View your results

    Upon activation, the last four weeks of activity will be uploaded. You can view the results for a single system, and for your infrastructure of registered systems, in the Insights dashboard.

    Note: If this is a newly registered system, there may not be much activity present until it’s at least a few days old.

    Go to Insights Dashboard

red hat insights on red hat openshift container platform

Guidance for getting started with Insights for OpenShift

Advisor

Red Hat OpenShift Container Platform (OCP) collects telemetry and configuration data about your cluster and reports it to Red Hat by using the Telemeter Client and the Insights Operator. All of this is configured in the registration of clusters using OpenShift Cluster Manager (OCM).

Learn More about Connected Clusters 

Learn More about Insights Advisor

OCM is a managed service where you can install, operate and upgrade your Red Hat OpenShift 4 clusters. It provides the links and steps to install OCP clusters and is responsible for managing both OCP clusters after self-installation and OpenShift Dedicated clusters.

To start using OpenShift Cluster Manager, you'll need:

  • A Red Hat login
  • A supported web browser. For details about web browser requirements, see the Browser Support link at the bottom of the cloud platform landing page. 

View your results in OpenShift Cluster Manager:

  1. Click the Clusters menu
  2. Click the cluster's name to display the details of that cluster
  3. Open the Insights tab of that cluster. Depending on the result, the tab displays one of the following:
    1. A message that your cluster passed all health checks, if Insights did not identify any issues.
    2. A list of issues Insights has detected, prioritized by risk (low, moderate, important, and critical)
    3. No health checks to display, if Insights has not yet analyzed the cluster. The analysis starts shortly after the cluster has been installed and connected to the Internet.
  4. If any issues are displayed on the tab, click the > icon in front of the entry for further details. 

Depending on the issue, the details can also contain a link to a Red Hat Knowledge Base article. For details and information on how to solve the problem, click How to remediate this issue

Subscriptions

    For the subscriptions service, if you are using Red Hat OpenShift as the data collection tool, the steps you must take depend on multiple factors, including your installed versions, whether connected or disconnected, and operating system for the clusters. 

    Learn More

    Red Hat OpenShift Container Platform 4.1 or later with Red Hat Enterprise Linux CoreOS

    This cluster architecture reports this data to Red Hat OpenShift Cluster Manager through Telemetry. Therefore, setup of the subscription reporting simply requires that you confirm that this monitoring tool is active. 

    1. Connect all clusters to Red Hat OpenShift Cluster Manager. Once connected, no additional configuration is needed.
    Red Hat OpenShift Container Platform 4.1 or later with a mixed environment of Red Hat Enterprise Linux CoreOS and Red Hat Enterprise Linux

    Here, data gathering changed between Red Hat OpenShift major versions 3 and 4's reporting models. Version 3 relies upon RHEL to report cluster usage at the node level. This is the same for version 4 RHEL nodes, however this reporting model reports RHEL CoreOS usage at the cluster level through Red Hat OpenShift tools.

    Given the tools that are used to gather this data are different for RHEL and CoreOS, the setup of subscription reporting is confirming that both tool sets are configured correctly.

    1. Connect all clusters to Red Hat OpenShift Cluster Manager.
    2. Connect all RHEL nodes to at least one of the data collection tools (Inisghts, Satellite, or Red Hat Subscription Management). 
    Red Hat OpenShift Container Platform version 3.11

    Subscription reporting for OpenShift Container Platform 3.11 uses the standard Red Hat Enterprise Linux data collection tools. 

    1. Connect all RHEL nodes to at least one of the data collection tools (Insights, Satellite, or Red Hat Subscription Management). Once connected, no additional configuration is needed.

    View your results in the Subscriptions Dashboard

    Cost Management

    Cost management for Red Hat OpenShift is a cloud service that provides cost visibility and analysis across hybrid and multicloud environments.

    To get started with Cost Management, you need: 

    • An active Red Hat OpenShift Container Platform subscription
    • One or more installed OpenShift Container Platform instances, version 4.6 or higher
    • RED HAT CUSTOMER USERNAME is your cloud.redhat.com username. This account must have organization administrator entitlements before you can add sources to cost management.
    • RED HAT CUSTOMER PASSWORD is your cloud.redhat.com password for your respective username

    To activate data collection and add sources:

    1. Add an OpenShift Container Platform source to cost management
      1. Install the Cost Operator
      2. Create a CostManagementMetricsConfig YAML file to configure the operator
      3. Create a cost management OpenShift Container Platform source
        1. For detailed steps on how to add your OpenShift Container Platform sources to cost management, please visit Adding an OpenShift Container Platform source.
    2. Add a public cloud source to cost management. If OpenShift Container Platform is running on any of the (cost management) supported public clouds, you will want to collect the cost and billing data from those cloud platforms.
      1. Cost management supports three public clouds: Amazon Web Services (AWS), Microsoft Azure, and Google Cloud Platform (GCP)
      2. For detailed steps on how to add your public cloud sources, please consult product documentation for AWS, Azure, and GCP respectively.
    3. Cost Models. If you are running OpenShift Container Platform on premises, you must create a cost model and assign the OCP sources to it.
      1. For more on how to build cost models, please visit Configure cost models to accurately report costs.

    NOTE: It can take up to 24 hours to see the cost and analytics data in cost management

    Topics

    Introduction to Red Hat Insights

    Introduction

    More than a monitoring system, Insights pinpoint security and configuration risks and enables security and IT teams to resolve problems before downtime results, now with the ability to define and alert for non-compliance with internal policies. Insights' updated platform provides Red Hat expertise-as-a-service across Red Hat Enterprise Linux deployed to physical, virtual, containers and private and public cloud environments.

    Additional Resources

    Red Hat Insights demo: Security and compliance risk management

    This demo shows how the vulnerability and compliance capabilities in Red Hat Insights can help you replace firefighting with analytics-driven processes.

    Blog post: Red Hat Insights Guidelines for Deployment at Scale

    Highlights features Red Hat has in place to assist with large deployments.

    Set up and use Cloud Connector with Insights and Smart Management

    Cloud Connector is used to integrate Red Hat Insights with Red Hat Satellite 6.7 infrastructure and enables remediation of any issues directly from the Insights console.

    Red Hat Insights Technical FAQ

    Answers to common technical questions about Red Hat Insights.

    How can we help you?

    Support Cases

    Get answers quickly by opening a support case with us.

    View Open Cases

    Open New Case

    Live Chat

    Directly access our support engineers during weekday business hours.

    Learn more

    Call or Email

    Speak directly with a Red Hat support expert by phone or through email.

    Contact Us