Performing the post deployment procedures
To activate the BMC Helix IT Operations Management account
As a tenant administrator, perform the following steps:
- Set the tenant administrator password:
- From the email that you received, click the activation link.
The activation link is valid for 72 hours. - Log on to the product by using the tenant administrator user name and the product URL.
- From the email that you received, click the activation link.
- On your product tile, click Launch to start using the product.
To set the ILM policy for log retention
If you enabled BMC Helix Logging, you must set the Index Lifecycle Management (ILM) policy for log retention in Kibana UI.
To set up an ILM policy to retain the logs for 10 days, perform the following steps:
- To create an ILM policy, perform the following steps:
Download the
file and copy its contents.- Log in to the Kibana UI.
From the config/infra.config file, obtain the URL to access the Kibana UI.
This is the value that you had set for the parameter KIBANA_LB_HOST.
For example, https://kibana.apexglobal.bmc.com.
See Configuration-file-settings. - Click
, and select Management > Dev Tools.
- If the Console tab has any data, delete it.
- Paste the contents of the HelixLogDeletePolicy.json file in the Console tab and click
.
You will get the following message and a policy is created with the name HelixLogDelete10DaysLog-Policy:
- To apply the ILM policy to all indices that are already created, perform the following steps:
- Click
, and select Management > Stack Management.
- Select Data > Index Management
- Select an index; for example, logstash-2024.01.04.
- From the Manage Index list, select Add lifecycle policy.
- In the Add lifecycle policy to "<Index name>" box, from the Lifecycle policy list, select the policy that you created, and click Add policy.
The policy is applied only to the index that you had selected; for example, logstash-2024.01.04. - Repeat the steps to apply the ILM policy to all indices.
- Click
- To verify that the policy is applied an index, perform the following steps:
- Click
, and select Management > Stack Management.
- Select Data > Index Management
- Click an index to view the summary.
- In the Index lifecycle management area, click Show definition to verify that the policy is applied.
- Click
- To create a ILM policy template, perform the following steps:
To apply the ILM policy to all new indices that might get created, you must create the ILM policy template.Download the file and copy its contents.
- Click
and select Management > Devtools.
- In the Console tab, paste the contents of the HelixLogIndexTemplate.json file and click
.
You will get the following message:
The index template HelixLogIndexTemplate gets created with the policy name HelixLogDelete10DaysLog-Policy.
The new template will apply to all new indices.
- To verify the ILM policy template created, perform the following steps:
- Click
, and select Management > Stack Management.
- Select Data > Index Management
- Go to the Index Templates tab and verify that the template is created.
- Click
For more information, see ILM: Manage the index lifecycle.
To import users or groups created by using an external IdP
For instructions about importing users or groups created by using an external IdP into BMC Helix Portal, see the External IdP user access section in User identities.
(Optional) To update the SMTP details
If you want to change the SMTP details; for example, host, port, password, or username, perform the following steps:
- Update the SMTP ConfigMap:
To edit the SMTP ConfigMap on a cluster, run the following command:
kubectl edit cm smtp-credentials -n <mamespace>Update the required SMTP details; for example, SMTP_HOST or SMTP_PORT:
apiVersion: v1
data:
SMTP_AUTH: "true"
SMTP_HOST: mailhost.bmc.com
SMTP_PORT: "25"
kind: ConfigMap- Save the file.
- Update the SMTP Secrets:
To edit the SMTP secrets file, run the following command:
kubectl edit secret smtp-credentials -n <namespace>The SMTP secrets file is displayed, as shown in the following code block:
apiVersion: v1
data:
SMTP_PASSWORD: IiI=
SMTP_USERNAME: BMC
kind: Secret- You can change the username, password, and other details in the secrets file.
To change the username or password, you must encode it into the Base64 format and then add it to the secrets file.
To encode the username in Base64 format, run the following command:
echo -n <username> | base64Copy the encoded username that gets generated.
To encode the password in Base64 format, run the following command:
echo -n <password> | base64Copy the encoded password that gets generated.
- Add the encoded username and password to the secrets file and save it.
(For BMC Helix Log Analytics) To change the log ingestion limit of your tenants
By default, BMC Helix Log Analyticscan ingest a maximum of 1 GB logs on a tenant. As a tenant administrator, you can change the log ingestion limit by performing the following steps:
From the controller box of your Kubernetes cluster, run the following command to get the name of the pod that runs the log-mgmt service:
kubectl get pod -n <namespace> | grep log-mgmt-serviceRun the following command to increase the log ingestion limit:
kubectl exec -it <log management pod name> -- bash -c "curl --location --request PUT 'http://log-mgmt-service:8093/logs-service/ingestion/control/api/v1.0/metadata/<tennant name>?idType=name' --header 'Content-Type: application/json' --data '{\"log_limit\" : <log ingestion limit>}'"For example, run the following command to increase the log limit to 2 GB:
kubectl exec -it log-mgmt-service-67b7c65fdb-76nwc -- bash -c "curl --location --request PUT 'http://log-mgmt-service:8093/logs-service/ingestion/control/api/v1.0/metadata/acme?idType=name' --header 'Content-Type: application/json' --data '{\"log_limit\" : 2}'"
(For BMC Helix Log Analytics ) To disable log ingestion limit
Run the following command as a root user from a CLI service pod to disable the daily ingestion limit:
For example,
Where to go from here
For information about using the following products, see the appropriate documentation links: