Start proactively finding and fixing infrastructure risks today.

What is Red Hat Insights?

Red Hat Insights is a proactive operational efficiency and security risk management solution in Red Hat Enterprise Linux (RHEL) subscriptions for versions 6.4 and higher, as well as public cloud versions of RHEL. It helps identify, prioritize, and resolve risks to security, compliance, performance, availability, and stability before they become urgent issues. Insights also enables users to monitor for adherence to internal policies and understand configuration changes over time.

We have added new services within Insights. The Policies service allows you to define your own internal policies and receive alerts when environments do not align. The Patch service analyzes Red Hat product advisories that apply to your RHEL environments to help you stay up to date. Compliance, Vulnerability, and Drift services are also now included in Insights. When combined, all of these services provide a more comprehensive management solution for RHEL environments.

Key Benefits

Avoid unplanned downtime and better manage security risks

See through complexity to pinpoint risks and resolve them before an outage or breach occurs.

Understand where to focus attention

Understand crucial areas that need to be addressed, even with large and complex RHEL environments, to better manage operations and avoid “firefighting.”

Resolve potential problems quickly

Use included remediation guidance for each risk identified, without time-consuming research or trial and error efforts.

Ease administration with a single tool

Only Red Hat Insights codifies Red Hat’s expertise and makes it available to you when and where you need it on the public cloud, private cloud, or on-premises.

Featured Resources

Insights-client Configuration Options for Red Hat Insights

This reference guide for Red Hat Insights will be updated with any client configuration parameter changes as they are made available.

How Red Hat customers use Red Hat Insights to identify issues in Linux environments

This webinar recording explains how Red Hat Insights helps Linux administrators identify key security and performance issues.

Get Started with Red Hat Insights

Register

Register your systems with the Red Hat Insights client

Review

Identify the connected RHEL hosts you are interested in analyzing.

Remediate

View your results at cloud.redhat.com or via Satellite integration.
Guidance for installing Insights on RHEL systems managed by Red Hat Subscription Manager (RHSM)

Preinstallation checks:

  • You must register all Red Hat Enterprise Linux (RHEL) systems with Red Hat Subscription Manager to receive  necessary updates and to resolve software dependencies.
[root@server ~]# subscription-manager register --auto-attach
  • Note: If the system cannot be subscribed to RHSM, basic authentication can be configured on the client. 
  • Red Hat Insights can be used on all Red Hat-supported versions of Red Hat Enterprise Linux, version 6.4 and later.
    • Red Hat Insights is included free with every Red Hat Enterprise Linux (RHEL) subscription. 
    • Because RHEL8 ships with the insights-client package preinstalled, installing the client is unnecessary on RHEL8 systems.
    • For RHEL8.2, Insights can be enabled at install time. Refer to the release notes for more information. 
  • The Compliance service relies on OpenSCAP scans and reporting. Compliance users must first install OpenSCAP packages and run an OpenSCAP scan. Users who are new to OpenSCAP should install the following OpenSCAP packages, at a minimum, in order to use the Compliance service:

    yum install openscap-scanner -y

    yum install scap-security-guide -y
    • Openscap-scanner:
    • Openscap-content: pre-built profiles
    • Note: For more information about OpenSCAP scanner installation, see the OpenSCAP Getting Started guide.
  1. 1

    Install the Red Hat Insights client and register your systems to Insights

    Use the automated installation tools to install and register on many systems, or use the manual installation instructions for single-system installations.

    Automated Installation
    Use a configuration management tool to automate installation and registration.

    Manual Installation 
    Perform the following steps to install the client on a RHEL system and register the system to Red Hat Insights:

    1. Install the client on the RHEL system.
    Note: This step is not required on RHEL8 systems.

    [root@server ~]# yum install insights-client
    2. Register the system to Red Hat Insights.
    ​​[root@server ~]# insights-client --register
    If you have a web-based proxy between your system and the Internet, you can configure the insights-client to connect through it. For more information, refer to How to access Red Hat Insights through a firewall/Proxy.
  2. 2

    View your results

    After registration, the Red Hat Insights client will initiate its first upload to Insights for analysis. You can view the results for a single system, and for your infrastructure of registered systems, in the Insights dashboard.

    GO TO INSIGHTS DASHBOARD

Additional Information

The Compliance service relies on OpenSCAP scans and reporting. Compliance users must first install OpenSCAP packages and run an OpenSCAP scan. 

Users who are new to OpenSCAP should perform the following actions, at a minimum, in order to use the Compliance service:
1. Install the Openscap-scanner (detailed above) and the following:

openscap-content: pre-built profiles
yum install scap-security-guide -y

Note: For more information about OpenSCAP scanner installation, see the OpenSCAP Getting Started guide.

2. Run the following command to see available profiles:

oscap info /usr/share/xml/scap/ssg/content/ssg-rhel7-xccdf.xml

Note: Change /ssg-rhel7-xccdf.xml as appropriate for your operating system.

3. For each profile, run the following command each time you wish to run a scan:

TZ=UTC oscap xccdf eval --profile PROFILE_NAME_HERE --results /var/lib/insights/latest-compliance-report.xml /usr/share/xml/scap/ssg/content/ssg-rhel7-xccdf.xml

Note: `oscap xccdf eval...` can only evaluate and produce a report for one profile at a time. If you have multiple policies you want to evaluate, run the command once for each of your policies, passing the name of the policy to the `--profile` argument.

4. Send the results to the Compliance service:

sudo insights-client --verbose --payload report.xml --content-type application/vnd.redhat.compliance.something+tgz
Guidance for installing Insights on RHEL systems managed by Satellite

Preinstallation checks:

  • Satellite organizations with Red Hat Insights must be operating in Connected mode. Any firewalls or proxies through which the Satellite server communicates to Red Hat must allow https communications to https://cert-api.access.redhat.com
  • Red Hat Insights can be used on all Red Hat-supported versions of Red Hat Enterprise Linux, version 6.4 and later.
  • Subscribe RHEL Hosts to the Satellite server. This step is typically already performed as part of Satellite host configuration. Only RHEL hosts registered to the particular Satellite server will have reports available in the Satellite UI.
  1. 1

    Verify connection to Red Hat Insights.

    Verify that the Satellite server can successfully communicate with Red Hat Insights. In the Satellite UI, navigate to Insights > Manage. Verify under Insights Engine Connection that the status is Connected and the Account Number field displays the correct information for your organization.

  2. 2

    Install the Insights RPM and register your system to Red Hat Insights

    There are multiple ways to automate this process. We've provided several options for popular configuration management tools below:

    • Ansible
    • Puppet
      • If you are using Red Hat Satellite’s configuration management provided by Puppet this process can be automated by applying the preinstalled Puppet class access_insights_clients. This class can be imported from the Puppet Master into the appropriate Puppet environment and applied to hosts that you wish to subscribe to Red Hat Insights. For more information on this topic, refer to the Creating a Host Group chapter in the official Satellite 6 User Guide .

    To install and register a system manually:

    1. Install the client on the RHEL system.
    Note: This step is not required on RHEL8 systems.

    [root@server ~]# yum install insights-client
    2. Register the system to Red Hat Insights.
    [root@server ~]# insights-client --register
  3. 3

    View your results

    After registration, the Insights client will initiate its first upload to Red Hat Insights for analysis. You can view your systems and the results of the Red Hat Insights analysis via the Insights tab within Satellite or in the Insights dashboard.

    GO TO INSIGHTS DASHBOARD

Additional Information


Assign Red Hat Insights roles to users
By default, only administrators can view Insights Report and Configuration screens. However, you can give non-admin users access to the Insights screens by assigning them the appropriate roles as follows:

  • To give users access to all Insights screens, including the Manage screen, assign them the Insights Admin role. Users must also be granted the view_content_host permission.
  • To give users Insights report and rule viewing access, assign them the Insights Viewer role. These users must also be granted the view_content_host permission.

For more information on roles, refer to the official Satellite 6 documentation.

Guidance for installing Insights on RHEL systems hosted in the public cloud

Preinstallation checks:

  1. 1

    Deploying Red Hat Insights on existing RHEL systems managed by Red Hat Cloud Access (RHCA)

    The following guidance is for users who wish to deploy Red Hat Insights on an existing Red Hat Enterprise Linux (RHEL) system connected to Red Hat Cloud Access (RHCA). This procedure involves the following tasks:

    1. Register all systems with Red Hat Subscription Manager for updates and to resolve software dependencies

    [root@server ~]# subscription-manager register --auto-attach

    Note: If the system can not be subscribed to RHSM, basic authentication may be leveraged for usage of the Insights client. 

    2. Install the client package on each system.

    [root@server ~]# yum install insights-client

    3. Register the system to Insights.

    ​​[root@server ~]# insights-client --register

    4. After registration, the Red Hat Insights client will initiate its first upload to Insights for analysis. You can view the results for a single system and for your infrastructure of registered systems in the Insights dashboard.

    GO TO INSIGHTS DASHBOARD

  2. 2

    Deploying Red Hat Insights on existing RHEL systems managed by Red Hat Update Infrastructure (RHUI)

    The following guidance is for users who wish to deploy Red Hat Insights on an existing, cloud marketplace-purchased Red Hat Enterprise Linux (RHEL) system managed by Red Hat Update Infrastructure (RHUI). This procedure involves the following tasks:

    1. Install the client package on each system.

    [root@server ~]# yum install insights-client

    2. Configure basic authentication in /etc/insights-client/insights-client.conf.
        a. Modify the auto_config= value to FALSE.
        b. Remove <your customer portal username> and enter your Red Hat SSO username.
        c. Remove <your customer portal password> and enter your Red Hat SSO password.
        d. Save the configuration.
     
    Note: To read more about using Red Hat Insights with basic authentication and recommended best practices, visit our documentation.

    3. Register the system to Insights.

    ​​[root@server ~]# insights-client --register

    4. After registration, the Red Hat Insights client will initiate its first upload to Insights for analysis. You can view the results for a single system and for your infrastructure of registered systems in the Insights dashboard.

    GO TO INSIGHTS DASHBOARD

Guidance for customers who are already using RHEL through a cloud provider, but have never interacted with Red Hat directly before

Preinstallation checks:

For Customers who are already using RHEL through a cloud provider, but have never interacted with Red Hat directly before, please follow these steps to get an account established with us to start using Red Hat Insights.

  1. 1

    Create a Red Hat Customer Portal Login

    In order to use Red Hat Insights, you will need to create a customer portal login if you do not already have one setup.

    To create an account, see Create a Red Hat Login.

  2. 2

    Establish your Account

    Once an account has been created, the account must be initialized for use with Red Hat Insights. Please visit and complete the Red Hat Insights evaluation form

    The initialization of this account may take a couple of minutes or up to an hour before systems can be registered for use. If any errors occur during registration of the Insights client, or usage of cloud.redhat.com redirects to the evaluation form, please attempt again at a later time as account initialization may still be in progress.

    Note: This form refers to this process as an “evaluation” as this step is needed to initialize the new account. Red Hat Insights is included as part of Red Hat Enterprise Linux for use and will continue to be free to use after this evaluation expires.

  3. 3

    Verify access to cloud.redhat.com

    To ensure your account has been set up correctly, log into the Red Hat Insights console

    Note: If the account is still initializing after filling out the Red Hat Insights evaluation form outlined in the previous step, you may be redirected to the evaluation form; revisit cloud.redhat.cm/insights later to verify the account has been established.

  4. 4

Topics

Introduction to Red Hat Insights

Introduction

More than a monitoring system, Insights pinpoint security and configuration risks and enables security and IT teams to resolve problems before downtime results, now with the ability to define and alert for non-compliance with internal policies. Insights' updated platform provides Red Hat expertise-as-a-service across Red Hat Enterprise Linux deployed to physical, virtual, containers and private and public cloud environments.

Additional Resources

User Access Configuration Guide for Red Hat Insights

List of configuration options available to administrators to optimize the insights-client on RHEL systems where it is installed and enabled.

Blog post: Red Hat Insights Guidelines for Deployment at Scale

Highlights features Red Hat has in place to assist with large deployments.

Red Hat Insights Technical FAQ

Answers to common technical questions about Red Hat Insights.

How can we help you?

Support Cases

Get answers quickly by opening a support case with us.

View Open Cases

Open New Case

Live Chat

Directly access our support engineers during weekday business hours.

Learn more

Call or Email

Speak directly with a Red Hat support expert by phone or through email.

Contact Us