ConfigSentry

Install Collector – FreeBSD

Installing the ConfigSentry On-Premise Collector on FreeBSD using the bootstrap installer script

Before you start, check the Collector Requirements to confirm your system is ready. You will need php-cli, either curl or wget, and bsdtar or tar installed.

1. Install Prerequisites

Ensure the required packages are installed. Using pkg:

pkg install php84-cli curl bsdtar

Replace php84-cli with the PHP CLI version available on your system. Any supported PHP CLI version will work.

2. Get the Bootstrap Command

Sign in to your ConfigSentry account and go to Appliances → Collectors. Open your collector and click Download – FreeBSD. Copy the bootstrap command shown — it includes your unique collector token.

3. Create the Installation Directory

Choose a directory to hold the collector:

mkdir -p ~/configsentry-collector
cd ~/configsentry-collector

4. Run the Bootstrap Command

Paste and run the bootstrap command from the dashboard. It will:

  • Download the latest collector runtime package.
  • Extract it to the current directory using bsdtar or tar.
  • Prompt you for any Enter Locally values (such as SSH credentials not stored in the dashboard).
  • Install a cron entry to keep the collector watchdog running.

5. Verify the Installation

After the bootstrap completes, check the cron entry was added:

crontab -l

You should see a ConfigSentry collector watchdog entry. Wait for the first scheduled run — the audit should appear in the ConfigSentry dashboard under Audits.

6. Firewall (Syslog)

If you have enabled syslog-triggered collection, ensure the host firewall (e.g. pf or ipfw) allows inbound UDP traffic on the configured listener port. By default this is UDP port 2216.

7. Updating the Collector

The collector watchdog checks for updates automatically according to its configured schedule. To force an immediate update, run the bootstrap command again from the installation directory.

8. Uninstalling

Remove the cron entry with crontab -e and delete the collector directory. No system-wide packages are installed by the collector itself.