PingIntelligence

Configuring system parameters

Configure system parameters by running the command below or manually if the configured user does not have sudo access.

Before you begin

The following two system parameters are required to be set before installing the PingIntelligence software:

  • For Elasticsearch: vm.max_map_count

  • For API Security Enforcer (ASE), API Behavioral Security (ABS), MongoDB, and Elasticsearch: ulimit

Configuring command-based system parameters

Before you begin

The script in this task uses sudo access for the user on the Elasticsearch, ASE, ABS, and MongoDB hosts. Ensure the address of these hosts was configured in the hosts file. See Creating a new SSH user and configuring user authentication.

About this task

To set up system parameters using command-based configuration:

Steps

  1. Run the following command to configure the system parameters on the respective virtual machines (VMs).

    Make sure that the following command is run only when install_as_sudo is set to true in the hosts file.

    [pi-api-deployment]# ./bin/start.sh configure
    Please see /opt/pingidentity/pi-api-deployment/logs/ansible.log for
    more details.

    Example:

    An example ansible.log file for a successful launch of EC2 instances is shown below:

    [pi-api-deployment]# tail -f logs/ansible.log
    
    ================================================================================
    Current Time: Sun Jun 07 06:05:25 EST 2020
    Starting configure scripts
    ================================================================================
    Sun Jun 07 06:05:25 EST 2020: Setting up local environment
    Sun Jun 07 06:05:25 EST 2020: Installing packages
    Sun Jun 07 06:05:25 EST 2020: Installing pip and ansible
    
    PLAY [Configure system settings for elasticsearch] *
    
    TASK [Get vm.max_map_count] 
    TASK [Set vm.max_map_count if less than 262144] 
    TASK [Get ulimit -n] 
    TASK [Set ulimit nofile to 65536 if value is low - softlimit] *
    TASK [Set ulimit nofile to 65536 if value is low - hardlimit] 
    
    PLAY RECAP *
    192.168.11.143             : ok=7    changed=1    unreachable=0    failed=0
    192.168.11.144             : ok=3    changed=0    unreachable=0    failed=0
    192.168.11.145             : ok=5    changed=2    unreachable=0    failed=0
    
    Sun Jun 07 06:06:14 EST 2020: Configure successful
    ================================================================================