Make sure you have installed all the prerequisites as detailed above.
In the platform, navigate to Settings > Advanced > Remote Agents.
Click the plus icon on the top right of the screen to open the Installation
process.
Click the Manual installation link.
In the first step, add the name of the Agent and choose the environment it
will be associated with. Click Next.
In the second step, you can either choose to download the Agent package onto
your machine, or you can add in an email address to send it a download link (Make sure you have configured the Email Integration
to the correct environment). Alternatively you can
click Add environment contact which will automatically add in the email
of the Contact Person for that environment. Click Next. The package is
either downloaded onto your computer or a link is sent by email depending on
what you have chosen.
Clicking on the link downloads the following zipped files to the required
machine:
.env: Siemplify environment variables
SiemplifyAgent_Centos.sh: Installer script file
Copy over the Installer command that is on the screen and save it for
later.
Keep the wizard open.
Using WinSCP or a similar tool, copy these files over to the machine you
want to install the agent on.
Log in to the machine that you want to install the agent on using SSH.
Enter your username and password.
Set the execution permissions on the file with the following command: sudo chmod +x SiemplifyAgent_Centos.sh
Install the agent using the saved command from the Agent Installation screen
When the script finishes, it will be clearly marked as finished.
Return to the Wizard in the platform and click “Next”. You
will receive a confirmation message that your Agent is connected.
[[["Easy to understand","easyToUnderstand","thumb-up"],["Solved my problem","solvedMyProblem","thumb-up"],["Other","otherUp","thumb-up"]],[["Hard to understand","hardToUnderstand","thumb-down"],["Incorrect information or sample code","incorrectInformationOrSampleCode","thumb-down"],["Missing the information/samples I need","missingTheInformationSamplesINeed","thumb-down"],["Other","otherDown","thumb-down"]],["Last updated 2025-08-29 UTC."],[[["\u003cp\u003eThis guide provides instructions for creating an agent with an installer on Red Hat Enterprise Linux (RHEL) 8.7, specifically for Google SecOps SOAR.\u003c/p\u003e\n"],["\u003cp\u003eThe installation process involves configuring the PATH variable, installing various Linux packages, starting services, and installing multiple versions of Python (2.7.18, 3.7.4, and 3.11.8) and OpenSSL 3.0.7.\u003c/p\u003e\n"],["\u003cp\u003eThe guide details the optional steps for integrating with Microsoft SQL, including the installation of the MsOdbc SQL Driver utils.\u003c/p\u003e\n"],["\u003cp\u003eDetailed instructions are provided for the installation of a remote agent, including prerequisites, downloading or emailing the agent package, transferring files via WinSCP, setting execution permissions, and running the installation script.\u003c/p\u003e\n"],["\u003cp\u003eAfter the agent script is executed, the user must return to the Google SecOps platform to complete the installation and receive a confirmation message.\u003c/p\u003e\n"]]],[],null,["# Create Agent with Installer for RHEL\n====================================\n\nSupported in: \nGoogle secops [SOAR](/chronicle/docs/secops/google-secops-soar-toc) \n| **Note:** This document applies to Red Hat Enterprise Linux (RHEL) 8.7\n\nAgent installation prerequisites\n================================\n\n\nGoogle recommends running the commands one by one to make sure each action is run successfully.\n| **Note:** Installation requires superuser privileges. Some dependencies must be accessible to non-root users. As such, we don't recommend changing the root user's `umask` from the `0022` default value.\n\n1. Configure PATH variable\n--------------------------\n\n echo 'export PATH=/usr/local/bin:$PATH' \u003e\u003e ~/.bashrc\n source ~/.bashrc\n\n2. Install Linux packages\n-------------------------\n\n dnf update -y\n dnf groupinstall -y 'Development Tools'\n dnf install bzip2-devel -y\n dnf install sqlite -y\n dnf install libffi-devel -y\n dnf install gcc -y\n dnf install gcc-c++ -y\n dnf install python2-devel -y\n dnf install python3-devel -y\n dnf install zlib-devel -y\n dnf install openssl-devel -y\n dnf install https://dl.fedoraproject.org/pub/epel/epel-release-latest-8.noarch.rpm\n dnf install epel-release -y\n subscription-manager repos --enable codeready-builder-for-rhel-8-x86_64-rpms\n dnf install perl-core -y\n dnf update -y\n dnf install supervisor -y\n dnf install at -y\n dnf install sharutils -y\n\n3. Start services\n-----------------\n\n systemctl start atd\n systemctl enable atd\n\n4. Install Python 2.7.18\n------------------------\n\n cd /usr/src/\n yum install wget -y\n wget https://www.python.org/ftp/python/2.7.18/Python-2.7.18.tgz\n tar -xzf Python-2.7.18.tgz\n cd Python-2.7.18\n ./configure --prefix=/usr/local --enable-unicode=ucs4\n make\n make altinstall\n\n5. Install OpenSSL 3.0.7\n------------------------\n\n**Important:** Keep the shell session open until you finish step 8. \n\n cd /usr/local/src\n wget https://www.openssl.org/source/openssl-3.0.7.tar.gz\n tar -xf openssl-3.0.7.tar.gz\n cd openssl-3.0.7\n ./config --prefix=/usr/local/ssl --openssldir=/usr/local/ssl shared zlib\n make -j$((`nproc`+1))\n make install\n cd /etc/ld.so.conf.d/\n echo /usr/local/ssl/lib64 \u003e openssl-3.0.7.conf\n ldconfig -v\n echo PATH=\"/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin:/usr/local/ssl/bin\" \u003e /etc/environment\n source /etc/environment\n ln -sf /usr/local/ssl/bin/openssl /usr/bin/openssl\n export LDFLAGS=\"$LDFLAGS -L/usr/local/ssl/lib64\"\n export LD_LIBRARY_PATH=/usr/local/ssl/lib64\n\n6. Install Python 3.7.4\n-----------------------\n\n cd /usr/src\n wget https://www.python.org/ftp/python/3.7.4/Python-3.7.4.tgz\n tar xzf Python-3.7.4.tgz\n cd Python-3.7.4\n ./configure --prefix=/usr/local --enable-unicode=ucs4 --with-openssl=/usr/local/ssl\n make\n make altinstall\n\n7. Install Python 3.11.8\n------------------------\n\n```bash\ncd /usr/src\nwget http://www.python.org/ftp/python/3.11.8/Python-3.11.8.tgz\ntar xzf Python-3.11.8.tgz\ncd Python-3.11.8\nmake clean\n./configure --prefix=/usr/local --enable-unicode=ucs4 --with-openssl=/usr/local/ssl\nmake\nmake altinstall\n```\n\n8. Create symlinks to the specific Python files\n-----------------------------------------------\n\n ln -s /usr/local/bin/python2.7 /usr/local/bin/python2\n ln -s /usr/local/bin/python3.7 /usr/local/bin/python3\n\n9. Configure pip\n----------------\n\n wget -O get-pip.py https://bootstrap.pypa.io/pip/2.7/get-pip.py\n /usr/local/bin/python2 get-pip.py\n /usr/local/bin/python3 get-pip.py\n /usr/local/bin/pip2 install --upgrade pip\n /usr/local/bin/pip3 install --upgrade pip\n wget -O get-pip-3.11.py https://bootstrap.pypa.io/get-pip.py\n /usr/local/bin/python3.11 get-pip-3.11.py\n /usr/local/bin/python3.11 -m pip install --upgrade pip\n\nUsing Microsoft SQL integration (Optional)\n------------------------------------------\n\nFor those using Microsoft SQL Integration, perform the following steps:\n\nMsOdbc Sql Driver utils\n-----------------------\n\n dnf -y remove unixODBC unixODBC-devel\n curl https://packages.microsoft.com/config/rhel/8/prod.repo \u003e /etc/yum.repos.d/mssql-release.repo\n dnf install -y msodbcsql17 mssql-tools unixODBC-devel\n ln -sfn /opt/mssql-tools/bin/bcp /usr/bin/bcp\n ln -sfn /opt/mssql-tools/bin/sqlcmd /usr/bin/sqlcmd\n\nTo install a Remote Agent:\n--------------------------\n\n1. Make sure you have installed all the prerequisites as detailed above.\n2. In the platform, navigate to Settings \\\u003e Advanced \\\u003e Remote Agents.\n3. Click the plus icon on the top right of the screen to open the Installation process.\n4. Click the Manual installation link.\n5. In the first step, add the name of the Agent and choose the environment it will be associated with. Click Next.\n6. In the second step, you can either choose to download the Agent package onto your machine, or you can add in an email address to send it a download link (Make sure you have configured the Email Integration to the correct environment). Alternatively you can click Add environment contact which will automatically add in the email of the Contact Person for that environment. Click Next. The package is either downloaded onto your computer or a link is sent by email depending on what you have chosen.\n7. Clicking on the link downloads the following zipped files to the required machine:\n - .env: Siemplify environment variables\n - SiemplifyAgent_Centos.sh: Installer script file\n8. Copy over the Installer command that is on the screen and save it for later. Keep the wizard open. [](/static/chronicle/images/soar/deployagentinstaller4.png)\n9. Using WinSCP or a similar tool, copy these files over to the machine you want to install the agent on.\n10. Log in to the machine that you want to install the agent on using SSH.\n11. Enter your username and password.\n12. Set the execution permissions on the file with the following command: \n `sudo chmod +x SiemplifyAgent_Centos.sh`\n13. Install the agent using the saved command from the Agent Installation screen\n14. When the script finishes, it will be clearly marked as finished.\n15. Return to the Wizard in the platform and click \"Next\". You will receive a confirmation message that your Agent is connected.\n\n**Need more help?** [Get answers from Community members and Google SecOps professionals.](https://security.googlecloudcommunity.com/google-security-operations-2)"]]
