15.2.4. Procedure – Installing the external indexer


The external indexer can be installed on the following 64-bit operating systems: Red Hat Enterprise Linux Server 6.7, Red Hat Enterprise Linux Server 7, CentOS 6.7, and CentOS 7. The installer is a self-contained package that includes every required dependency of the indexer.


  1. Log in as root to the host that you want to use to index your audit trails.

  2. Copy the installer package to the host.

  3. Install the package using the package manager of the operating system. For example:

    rpm -i external-indexer-standalone-<version-number>.x86_64.rpm

    The installer performs the following steps automatically.

    • Unpacks the indexer files into the /opt/external-indexer/ directory.

    • Installs the related init scripts (the /etc/init.d/external-indexer init script, and adds the init script configuration to /etc/sysconfig/external-indexer).

    • Creates the indexer user and usergroup. This is an unprivileged user that is used to run the indexer application.

    • Registers the service to start automatically on system boot. Note that the indexer init script uses bind mount points.

  4. Edit the firewall rules of the host to accept connections from PSM on the TCP/12345 port. For example:

    iptables -A INPUT -p tcp --destination-port 12345 --jump ACCEPT

    If there is a firewall between the indexer host and PSM, enable two-way communication between them on the TCP/12345 port.

  5. Configure the indexer. For details, see Procedure 15.2.5, Configuring the external indexer.