How To Install prelude-lml on CentOS 7

In this tutorial we learn how to install prelude-lml on CentOS 7. prelude-lml is Log analyzer sensor with IDMEF output

Introduction

In this tutorial we learn how to install prelude-lml on CentOS 7.

What is prelude-lml

The Prelude Log Monitoring Lackey (LML) is the host-based sensor program part of the Prelude SIEM suite. It can act as a centralized log collector for local or remote systems, or as a simple log analyzer (such as swatch). It can run as a network server listening on a syslog port or analyze log files. It supports log files in the BSD syslog format and is able to analyze any log file by using the PCRE library. It can apply log file specific analysis through plugins such as PAX. It can send an alert to the Prelude Manager when a suspicious log entry is detected.

We can use yum or dnf to install prelude-lml on CentOS 7. In this tutorial we discuss both methods but you only need to choose one of method to install prelude-lml.

Install prelude-lml on CentOS 7 Using yum

Update yum database with yum using the following command.

sudo yum makecache

After updating yum database, We can install prelude-lml using yum by running the following command:

sudo yum -y install prelude-lml

Install prelude-lml on CentOS 7 Using dnf

If you don’t have dnf installed you can install DNF on CentOS 7 first. Update yum database with dnf using the following command.

sudo dnf makecache

After updating yum database, We can install prelude-lml using dnf by running the following command:

sudo dnf -y install prelude-lml

How To Uninstall prelude-lml on CentOS 7

To uninstall only the prelude-lml package we can use the following command:

sudo dnf remove prelude-lml

References

Summary

In this tutorial we learn how to install prelude-lml on CentOS 7 using yum and dnf.