How to use "support execute" command in Guaridum CLI console?

Answer

There are two steps to use "support execute" command. Need to install and activate. Here is the detail instruction to install and activate the functionality.

Version 9.0, 9.1

1. Install the latest GPU

Issue "support execute" from CLI console to see if the command exists. If you see the following output, "support execute" command doesn't exist in your appliance. Install the latest GPU ( e.g. 9.0p150 ) to install the command.

guard.ibm.com> support execute USAGE: support <arg>, where arg is: analyze, check, clean, logrotate, must_gather, ping, reset-password, show, shrink

[NOTE] Applying 9.0p1107 can be a workaround if you're seeing the above result and there is any reason that you can't apply the latest GPU.


2. Install 9.0p1101 to enable "support execute" command.

Issue "support execute" from CLI console again. If you see the following output, "support execute" command exists but not activated. Install 9.0p1101 to activate "support execute" command.

guard.ibm.com> support execute This functionality is not activated on this appliance. ok

Then you'll see the following output if "support execute" command is installed and activated.

guard.ibm.com> support execute Invalid Command options support execute <"OS Command"> <PMR Number> <Support Key> ok guard.ibm.com>

3. Install 9.0p1135 ( 64bit Guardium only )

If you're using 64bit Guardium, support execute command may return the following error after you've done the above two steps.

guard.ibm.com> support execute "ls -l /var/tmp" xxxxx xxxxx Executing "ls -l /var/tmp" (snip) /usr/local/guardium/bin/execute_bin: error while loading shared libraries: libssl.so.4: cannot open shared object file: No such file or directory (snip)

To resolve this library issue, please install 9.0p1135. This patch is required only to 64bit Guardium.

[NOTE] Ad-hoc patch 9.0p1101, 9.0p1107, and 9.0p1135 are not available on IBM Fix Central. These patches will be provided by Technical Support when it's required.

Version 8.2

1. Install the latest GPU

Issue "support execute" from CLI console to see if the command exists. If you see the following output, "support execute" command doesn't exist in your appliance. Install the latest GPU ( e.g. 8.2p200 ) to install the command.

guard.ibm.com> support execute USAGE: support <arg>, where arg is: analyze, check, clean, logrotate, must_gather, ping, reset-password, show, shrink

2. Install 8.2p1132 to enable "support execute" command.

Issue "support execute" from CLI console again. If you see the following output, "support execute" command exists but not activated. Install 8.2p1132 to activate "support execute" command.

guard.ibm.com> support execute This functionality is not activated on this appliance. ok

Then you'll see the following output if "support execute" command is installed and activated.

guard.ibm.com> support execute Invalid Command options support execute <"OS Command"> <PMR Number> <Support Key> ok guard.ibm.com>

[NOTE] Ad-hoc patch 8.2p1131 is not available on IBM Fix Central. The patch will be provided by Technical Support when it's required.