DocsLinux agent

Install the Linux agent

On Linux the Televane agent runs as a hardened systemd service with its own unprivileged user, a read-only file system view and a memory cap. It sends CPU, memory, disk, network and top-process metrics every 15 seconds, connects outbound only and opens no ports.

Requirements

ItemRequirement
LinuxA distribution with systemd (for example Ubuntu, Debian, RHEL, Rocky, AlmaLinux, Amazon Linux, SUSE) on x86-64 or 64-bit ARM
Rightssudo or root
Toolscurl and tar
NetworkOutbound HTTPS (TCP 443) to ingest.televane.com and portal.televane.com

Install with one command

  1. In the portal open Add data, choose Linux, then Generate installation command and Copy command.
  2. Paste it into a shell on the server and press Enter. It asks for your sudo password if needed.

The command downloads the agent package for your architecture from portal.televane.com, enrolls it with your one-time token (valid for 15 minutes) and enables the observability-agent service.

Verify

systemctl status observability-agent
journalctl -u observability-agent -n 50

The service should be active (running). The server appears under Hosts in the portal within a minute or two.

Manual installation

curl -fsSLO https://portal.televane.com/downloads/televane-agent-linux-amd64.tar.gz
curl -fsSL https://portal.televane.com/downloads/SHA256SUMS.txt | grep linux-amd64 | sha256sum -c
mkdir televane-agent && tar -xzf televane-agent-linux-amd64.tar.gz -C televane-agent
sudo ./televane-agent/install.sh --server https://ingest.televane.com --enroll-token enr_YOUR_TOKEN

Use linux-arm64 on 64-bit ARM servers. Add --no-remote-upgrades to keep the binary read-only in /usr/local/bin.

Collect logs (optional)

Edit /etc/observability-agent/agent.json to follow log files or the systemd journal, then restart the service:

{
  "version": 1,
  "logs": {
    "files": ["/var/log/nginx/*.log"],
    "journald": {"enabled": true, "units": ["nginx.service"], "minPriority": "warning"}
  }
}
sudo observability-agent config check --config /etc/observability-agent/agent.json
sudo systemctl restart observability-agent

Secrets such as passwords, tokens and keys are masked on the server before log lines are sent.

Uninstall

sudo systemctl disable --now observability-agent
sudo rm -rf /etc/systemd/system/observability-agent.service /etc/systemd/system/observability-agent.service.d \
  /usr/local/bin/observability-agent /etc/observability-agent /var/lib/observability-agent
sudo systemctl daemon-reload

Then remove the host on the Agents page in the portal to revoke its credential.