DocsLinux agent
Install the Linux agent
On Linux the Televane agent runs as a hardened systemd service with its own unprivileged user, a read-only file system view and a memory cap. It sends CPU, memory, disk, network and top-process metrics every 15 seconds, connects outbound only and opens no ports.
Requirements
| Item | Requirement |
|---|---|
| Linux | A distribution with systemd (for example Ubuntu, Debian, RHEL, Rocky, AlmaLinux, Amazon Linux, SUSE) on x86-64 or 64-bit ARM |
| Rights | sudo or root |
| Tools | curl and tar |
| Network | Outbound HTTPS (TCP 443) to ingest.televane.com and portal.televane.com |
Install with one command
- In the portal open Add data, choose Linux, then Generate installation command and Copy command.
- Paste it into a shell on the server and press Enter. It asks for your
sudopassword if needed.
The command downloads the agent package for your architecture from portal.televane.com, enrolls it with your one-time token (valid for 15 minutes) and enables the observability-agent service.
Verify
systemctl status observability-agent
journalctl -u observability-agent -n 50
The service should be active (running). The server appears under Hosts in the portal within a minute or two.
Manual installation
curl -fsSLO https://portal.televane.com/downloads/televane-agent-linux-amd64.tar.gz
curl -fsSL https://portal.televane.com/downloads/SHA256SUMS.txt | grep linux-amd64 | sha256sum -c
mkdir televane-agent && tar -xzf televane-agent-linux-amd64.tar.gz -C televane-agent
sudo ./televane-agent/install.sh --server https://ingest.televane.com --enroll-token enr_YOUR_TOKEN
Use linux-arm64 on 64-bit ARM servers. Add --no-remote-upgrades to keep the binary read-only in /usr/local/bin.
Collect logs (optional)
Edit /etc/observability-agent/agent.json to follow log files or the systemd journal, then restart the service:
{
"version": 1,
"logs": {
"files": ["/var/log/nginx/*.log"],
"journald": {"enabled": true, "units": ["nginx.service"], "minPriority": "warning"}
}
}
sudo observability-agent config check --config /etc/observability-agent/agent.json
sudo systemctl restart observability-agent
Secrets such as passwords, tokens and keys are masked on the server before log lines are sent.
Uninstall
sudo systemctl disable --now observability-agent
sudo rm -rf /etc/systemd/system/observability-agent.service /etc/systemd/system/observability-agent.service.d \
/usr/local/bin/observability-agent /etc/observability-agent /var/lib/observability-agent
sudo systemctl daemon-reload
Then remove the host on the Agents page in the portal to revoke its credential.