This guide provides the required packages to install an agent on Red Hat Enterprise
Linux (RHEL) 8.7. Before you install an agent, you must install and configure required packages listed in this document.
Google recommends running the commands one by one to make sure each action is run successfully.
Install and configure required packages
To install and configure required packages, follow these steps:
Run the following commands to configure the PATH variable:
Before you install a remote agent, make sure you've completed all the required configurations.
To install a remote agent, follow these steps:
In the platform, go to Settings>Advanced>Remote Agents.
On the Remote Agents page, click addAdd> click Manual installation.
Enter a name for the agent and select an environment.
Click Next.
Select an option to download the agent files:
Download the agent on your machine.
Enter an email address to send the download to the configured email address. Make sure you have configured the email integration to the correct environment.
Optional: Click Add environment contact to add a contact person for the environment.
The following files are downloaded:
.env: Siemplify environment variables
SiemplifyAgent_Centos.sh: Installer script file
Click Next.
Store the installer command in a secure location.
Use WinSCP (or a similar tool) to copy the files to the machine where you want to install the agent.
Sign in to the machine using SSH with your username and password.
Run the following command to set the permissions for the installer script:
sudo chmod +x SiemplifyAgent_Centos.sh
Run the installer command you saved to install the agent.
Return to the installation process on your platform and then click Next. A confirmation message for agent connection appears.
[[["Easy to understand","easyToUnderstand","thumb-up"],["Solved my problem","solvedMyProblem","thumb-up"],["Other","otherUp","thumb-up"]],[["Hard to understand","hardToUnderstand","thumb-down"],["Incorrect information or sample code","incorrectInformationOrSampleCode","thumb-down"],["Missing the information/samples I need","missingTheInformationSamplesINeed","thumb-down"],["Other","otherDown","thumb-down"]],["Last updated 2025-09-10 UTC."],[[["\u003cp\u003eThis guide provides instructions for creating an agent with an installer on Red Hat Enterprise Linux (RHEL) 8.7, specifically for Google SecOps SOAR.\u003c/p\u003e\n"],["\u003cp\u003eThe installation process involves configuring the PATH variable, installing various Linux packages, starting services, and installing multiple versions of Python (2.7.18, 3.7.4, and 3.11.8) and OpenSSL 3.0.7.\u003c/p\u003e\n"],["\u003cp\u003eThe guide details the optional steps for integrating with Microsoft SQL, including the installation of the MsOdbc SQL Driver utils.\u003c/p\u003e\n"],["\u003cp\u003eDetailed instructions are provided for the installation of a remote agent, including prerequisites, downloading or emailing the agent package, transferring files via WinSCP, setting execution permissions, and running the installation script.\u003c/p\u003e\n"],["\u003cp\u003eAfter the agent script is executed, the user must return to the Google SecOps platform to complete the installation and receive a confirmation message.\u003c/p\u003e\n"]]],[],null,["Create an agent using an installer for RHEL \nSupported in: \nGoogle secops [SOAR](/chronicle/docs/secops/google-secops-soar-toc) \nThis guide provides the required packages to install an agent on Red Hat Enterprise\nLinux (RHEL) 8.7. Before you install an agent, you must install and configure required packages listed in this document.\n\nGoogle recommends running the commands one by one to make sure each action is run successfully.\n| **Note:** To install all the packages, you must have superuser privileges. However, to ensure some dependencies remain accessible to non-root users, don't change the root user's `umask` from the default value of `0022`.\n\nInstall and configure required packages\n\nTo install and configure required packages, follow these steps:\n\n1. Run the following commands to configure the `PATH` variable: \n\n echo 'export PATH=/usr/local/bin:$PATH' \u003e\u003e ~/.bashrc\n source ~/.bashrc\n\n2. Run the following commands to install Linux packages: \n\n dnf update -y\n dnf groupinstall -y 'Development Tools'\n dnf install bzip2-devel -y\n dnf install sqlite -y\n dnf install libffi-devel -y\n dnf install gcc -y\n dnf install gcc-c++ -y\n dnf install python2-devel -y\n dnf install python3-devel -y\n dnf install zlib-devel -y\n dnf install openssl-devel -y\n dnf install https://dl.fedoraproject.org/pub/epel/epel-release-latest-8.noarch.rpm\n dnf install epel-release -y\n subscription-manager repos --enable codeready-builder-for-rhel-8-x86_64-rpms\n dnf install perl-core -y\n dnf update -y\n dnf install supervisor -y\n dnf install at -y\n dnf install sharutils -y\n\n3. Run the following commands to start the `atd` service: \n\n systemctl start atd\n systemctl enable atd\n\n4. Run the following commands to install Python 2.7.18: \n\n cd /usr/src/\n yum install wget -y\n wget https://www.python.org/ftp/python/2.7.18/Python-2.7.18.tgz\n tar -xzf Python-2.7.18.tgz\n cd Python-2.7.18\n ./configure --prefix=/usr/local --enable-unicode=ucs4\n make\n make altinstall\n\n5. Run the following commands to install OpenSSL 3.0.7:\n**Important:** Keep the shell session open until you've completed the final step. \n\n cd /usr/local/src\n wget https://www.openssl.org/source/openssl-3.0.7.tar.gz\n tar -xf openssl-3.0.7.tar.gz\n cd openssl-3.0.7\n ./config --prefix=/usr/local/ssl --openssldir=/usr/local/ssl shared zlib\n make -j$((`nproc`+1))\n make install\n cd /etc/ld.so.conf.d/\n echo /usr/local/ssl/lib64 \u003e openssl-3.0.7.conf\n ldconfig -v\n echo PATH=\"/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin:/usr/local/ssl/bin\" \u003e /etc/environment\n source /etc/environment\n ln -sf /usr/local/ssl/bin/openssl /usr/bin/openssl\n export LDFLAGS=\"$LDFLAGS -L/usr/local/ssl/lib64\"\n export LD_LIBRARY_PATH=/usr/local/ssl/lib64\n\n6. Run the following commands to install Python 3.7.4: \n\n cd /usr/src\n wget https://www.python.org/ftp/python/3.7.4/Python-3.7.4.tgz\n tar xzf Python-3.7.4.tgz\n cd Python-3.7.4\n ./configure --prefix=/usr/local --enable-unicode=ucs4 --with-openssl=/usr/local/ssl\n make\n make altinstall\n\n7. Run the following commands to install Python 3.11.8: \n\n```bash\ncd /usr/src\nwget http://www.python.org/ftp/python/3.11.8/Python-3.11.8.tgz\ntar xzf Python-3.11.8.tgz\ncd Python-3.11.8\nmake clean\n./configure --prefix=/usr/local --enable-unicode=ucs4 --with-openssl=/usr/local/ssl\nmake\nmake altinstall\n```\n8. Run the following commands to create Python symlinks: \n\n ln -s /usr/local/bin/python2.7 /usr/local/bin/python2\n ln -s /usr/local/bin/python3.7 /usr/local/bin/python3\n\n9. Run the following commands to configure `pip` for all Python versions: \n\n wget -O get-pip.py https://bootstrap.pypa.io/pip/2.7/get-pip.py\n /usr/local/bin/python2 get-pip.py\n /usr/local/bin/python3 get-pip.py\n /usr/local/bin/pip2 install --upgrade pip\n /usr/local/bin/pip3 install --upgrade pip\n wget -O get-pip-3.11.py https://bootstrap.pypa.io/get-pip.py\n /usr/local/bin/python3.11 get-pip-3.11.py\n /usr/local/bin/python3.11 -m pip install --upgrade pip\n\n10. Optional: If you're using Microsoft SQL Integration, run the following commands to install **MsOdbc SQL driver utils**: \n\n dnf -y remove unixODBC unixODBC-devel\n curl https://packages.microsoft.com/config/rhel/8/prod.repo \u003e /etc/yum.repos.d/mssql-release.repo\n dnf install -y msodbcsql17 mssql-tools unixODBC-devel\n ln -sfn /opt/mssql-tools/bin/bcp /usr/bin/bcp\n ln -sfn /opt/mssql-tools/bin/sqlcmd /usr/bin/sqlcmd\n\nInstall a remote agent\n\nBefore you install a remote agent, make sure you've completed all the [required configurations](#reqpackgesrhel).\n\nTo install a remote agent, follow these steps:\n\n1. In the platform, go to **Settings** \\\u003e **Advanced** \\\u003e **Remote Agents**.\n2. On the **Remote Agents** page, click add**Add** \\\u003e click **Manual installation**.\n3. Enter a name for the agent and select an environment.\n4. Click **Next**.\n5. Select an option to download the agent files:\n\n - Download the agent on your machine.\n - Enter an email address to send the download to the configured email address. Make sure you have configured the email integration to the correct environment.\n6. Optional: Click **Add environment contact** to add a contact person for the environment.\n\n The following files are downloaded:\n - `.env`: Siemplify environment variables\n - `SiemplifyAgent_Centos.sh`: Installer script file\n7. Click **Next**.\n8. Store the installer command in a secure location.\n9. Use **WinSCP** (or a similar tool) to copy the files to the machine where you want to install the agent.\n10. Sign in to the machine using SSH with your username and password.\n11. Run the following command to set the permissions for the installer script:\n`sudo chmod +x SiemplifyAgent_Centos.sh`\n12. Run the installer command you saved to install the agent.\n13. Return to the installation process on your platform and then click **Next**. A confirmation message for agent connection appears.\n\n**Need more help?** [Get answers from Community members and Google SecOps professionals.](https://security.googlecloudcommunity.com/google-security-operations-2)"]]
