Description

This article describes how to uninstall the Integrated Log Collector from Security Director.

Symptoms

If you have Integrated Log Collector on Junos Space, you cannot enable Network Monitoring feature. If you want to enable Network Monitoring, you need to uninstall Log collector.

Solution

Procedure

In order to uninstall Integrated Log collector, we need to uninstall jIngest rpm from  the Junos Space node on which it is installed. The integrated log collector node deletion is disabled from the UI. The script has to be manually uninstalled from the Junos Space CLI.

  1. /etc/init.d/jingest stop
  2. rpm -qa jIngest
  3. rpm -e <result of second step>

Now the log collector node should be removed from Logging Node. If you want, you can enable Network Monitoring functionality.

Example

1. Check the status of jingest service and then stop the jingest service, which is responsible for Log Collector:

[root@lab0001 tmp]# /etc/init.d/jingest status
jingest is running
[root@lab0001 tmp]# /etc/init.d/jingest stop
Killing jingest (pid 27432) with SIGTERM
Waiting jingest (pid 27432) to die...
Waiting jingest (pid 27432) to die...
jingest stopped.
[root@lab0001 tmp]# /etc/init.d/jingest status
jingest is not running

2 . Check the rpm for jIngest as below:

[root@lab0001 tmp]# rpm -qa | grep jIngest
jIngest-1-0.noarch

3. Uninstall the RPM as below:
[root@lab0001 tmp]# rpm -e jIngest-1-0.noarch
warning:    erase unlink of /opt/jIngest/watcher/simplejson-2.1.0.tar.gz failed: No such file or directory
warning:    erase unlink of /opt/jIngest/watcher/setuptools-18.1.tar.gz failed: No such file or directory
warning:    erase unlink of /opt/jIngest/config/sockets.xml failed: No such file or directory
{"delete-node":{"response":"Successfully deleted."}}4
[root@lab0001 tmp]#