[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$fom2aTMWmFiJ7K-xHNxHsAtvvS76TrO-fsLXgakpusAo":3},{"id":4,"question":5,"answer":6,"answerHtml":7,"slug":8,"keywords":9,"article":10,"status":34,"aiModel":39,"aiConfidence":39,"updatedAt":51,"createdAt":51,"_status":50},943,"How do you enable remote debugging on a vRealize Log Insight appliance, and which service is targeted?","To enable remote debugging, first locate the main web service by running `systemctl status` and identifying `loginsight.service`. Then, examine its startup parameters using `ps aux|grep java` to see JVM arguments. The primary Java process runs the `LogInsightDaemon` class with Tomcat embedded (Apache Tomcat 8.5.82). You can modify the JVM options (e.g., add `-agentlib:jdwp`) in the startup script to attach a debugger, similar to techniques used for other VMware appliances.","\u003Cp>To enable remote debugging, first locate the main web service by running `systemctl status` and identifying `loginsight.service`. Then, examine its startup parameters using `ps aux|grep java` to see JVM arguments. The primary Java process runs the `LogInsightDaemon` class with Tomcat embedded (Apache Tomcat 8.5.82). You can modify the JVM options (e.g., add `-agentlib:jdwp`) in the startup script to attach a debugger, similar to techniques used for other VMware appliances.\u003C\u002Fp>\u003Cp>\u003Ca href=\"\u002Fnews\u002Fvrealize-log-insight-vulnerability-debugging-environment\">Read the related One Day Sec article\u003C\u002Fa>\u003C\u002Fp>","how-do-you-enable-remote-debugging-on-a-vrealize-log-insight-appliance-and-which-1777481292749","remote debugging, loginsight.service, JVM arguments, Tomcat, jdwp, startup script",{"id":11,"title":12,"slug":13,"description":14,"content":15,"contentHtml":30,"cover":31,"author":32,"views":19,"readingTime":33,"status":34,"publishedAt":35,"seo":36,"tags":41,"qaPairs":42,"meta":47,"updatedAt":48,"createdAt":49,"_status":50},229,"vRealize Log Insight Vulnerability Debugging Environment Setup","vrealize-log-insight-vulnerability-debugging-environment","Step-by-step guide to set up a vRealize Log Insight vulnerability debugging environment, covering installation, configuration, and remote debugging.",{"root":16},{"type":17,"format":18,"indent":19,"version":20,"children":21,"direction":29},"root","",0,1,[22],{"type":23,"format":18,"indent":19,"version":20,"children":24,"direction":29},"paragraph",[25],{"mode":26,"text":27,"type":28,"style":18,"detail":19,"format":19,"version":20},"normal","\u003Chtml>\u003Chead>\u003C\u002Fhead>\u003Cbody>\u003Ch2>0x00 Preface\u003C\u002Fh2>\u003Cp>---\u003C\u002Fp>\u003Cp>This article documents the details of building a vRealize Log Insight vulnerability debugging environment from scratch.\u003C\u002Fp>\u003Ch2>0x01 Introduction\u003C\u002Fh2>\u003Cp>---\u003C\u002Fp>\u003Cp>This article will cover the following topics:\u003C\u002Fp>\u003Cul>\u003Cli>vRealize Log Insight Installation\u003C\u002Fli>\u003Cli>vRealize Log Insight Vulnerability Debugging Environment Configuration\u003C\u002Fli>\u003Cli>Database Operations\u003C\u002Fli>\u003C\u002Ful>\u003Ch2>0x02 vRealize Log Insight Installation\u003C\u002Fh2>\u003Cp>---\u003C\u002Fp>\u003Cp>Reference: https:\u002F\u002Fdocs.vmware.com\u002Fen\u002FvRealize-Log-Insight\u002Findex.html\u003C\u002Fp>\u003Ch3>1. Download OVA File\u003C\u002Fh3>\u003Cp>Download page: https:\u002F\u002Fcustomerconnect.vmware.com\u002Fevalcenter?p=vr-li\u003C\u002Fp>\u003Cp>Download requires user registration first, then select the desired version for download\u003C\u002Fp>\u003Ch3>2. Installation\u003C\u002Fh3>\u003Ch4>(1) Import the OVA file in VMware Workstation\u003C\u002Fh4>\u003Ch4>(2) Configuration\u003C\u002Fh4>\u003Cp>Access the configuration page at https:\u002F\u002F\u003Cip>\u002F\u003C\u002Fip>\u003C\u002Fp>\u003Cp>Select Starting New Deployment, set the admin user password\u003C\u002Fp>\u003Ch3>3. Enable remote debugging function\u003C\u002Fh3>\u003Ch4>(1) Check the status of all services\u003C\u002Fh4>\u003Ctable>\u003Ctbody>\u003Ctr>\u003Ctd>\u003Cp>systemctl status\u003C\u002Fp>\u003C\u002Ftd>\u003C\u002Ftr>\u003C\u002Ftbody>\u003C\u002Ftable>\u003Cp>Result as shown in the figure below\u003C\u002Fp>\u003Cp>\u003Cimg alt=\"Alt text\" src=\"\u002Fuploads\u002Fdocx_image_1770015140353_0_e527896f22.png\">\u003C\u002Fp>\u003Cp>Locate the web-related service as loginsight.service\u003C\u002Fp>\u003Ch4>(2) View detailed information of loginsight.service\u003C\u002Fh4>\u003Ctable>\u003Ctbody>\u003Ctr>\u003Ctd>\u003Cp>systemctl status loginsight.service\u003C\u002Fp>\u003C\u002Ftd>\u003C\u002Ftr>\u003C\u002Ftbody>\u003C\u002Ftable>\u003Cp>Result as shown in the figure below\u003C\u002Fp>\u003Cp>\u003Cimg alt=\"Alt text\" src=\"\u002Fuploads\u002Fdocx_image_1770015144679_1_7bbd11b7af.png\">\u003C\u002Fp>\u003Cp>Locate the service startup file: \u002Fusr\u002Flib\u002Floginsight\u002Fapplication\u002Fbin\u002Floginsight\u003C\u002Fp>\u003Ch4>(3) View process parameters\u003C\u002Fh4>\u003Cp>Execute command: ps aux|grep java\u003C\u002Fp>\u003Cp>Return result:\u003C\u002Fp>\u003Ctable>\u003Ctbody>\u003Ctr>\u003Ctd>\u003Cp>root      1977  4.7 34.5 4687676 1396852 ?     Sl   00:04   6:55 \u002Fusr\u002Flib\u002Floginsight\u002Fapplication\u002F3rd_party\u002Fbin\u002Fjava -Xrs -XX:+HeapDumpOnOutOfMemoryError -XX:HeapDumpPath=\u002Fstorage\u002Fcore\u002Floginsight\u002Fvar\u002Fheapdump\u002Fli_heapdump.hprof -XX:ErrorFile=\u002Fstorage\u002Fcore\u002Floginsight\u002Fvar\u002Fjvm_hs_err_pid.log -Djava.util.logging.config.level=SEVERE -Djdk.tls.ephemeralDHKeySize=2048 -Dorg.bouncycastle.fips.approved_only=false -Djavax.net.ssl.trustStorePassword=changeit -Djdk.http.auth.tunneling.disabledSchemes=\"\" -DLOGINSIGHT_HOME=\u002Fusr\u002Flib\u002Floginsight -Dstrata.pgid=1961 -cp \u002Fusr\u002Flib\u002Floginsight\u002Fapplication\u002Flib\u002F* -Xmx1972m -Xms1972m -Xss256k -Xmn1024M -XX:+UseConcMarkSweepGC -XX:+UseParNewGC -XX:CMSInitiatingOccupancyFraction=75 -XX:+UseCMSInitiatingOccupancyOnly -XX:+ScavengeBeforeFullGC -XX:TargetSurvivorRatio=80 -XX:SurvivorRatio=8 -XX:MaxTenuringThreshold=15 -XX:ParallelGCThreads=4 -XX:+UseCompressedOops -XX:+OptimizeStringConcat -XX:+AlwaysPreTouch com.vmware.loginsight.daemon.LogInsightDaemon --wait=120\u003Cbr>root      2157  0.1  2.0 2685308 84276 ?       Sl   00:04   0:17 \u002Fusr\u002Flib\u002Floginsight\u002Fapplication\u002F3rd_party\u002Fbin\u002Fjava -Xms100m -Xmx256m -jar -Dapp.log.home=\u002Fstorage\u002Fvar\u002Floginsight \u002Fusr\u002Flib\u002Floginsight\u002Fapplication\u002F3rd_party\u002FvI18nManager-logInsight-8.10.latest.jar --server.scheme=https -c --swagger-ui.enable=false\u003Cbr>root      2327  0.6 15.1 3577064 612048 ?      Sl   00:04   0:57 \u002Fusr\u002Flib\u002Floginsight\u002Fapplication\u002F3rd_party\u002Fbin\u002Fjava -Dnop -Djava.util.logging.manager=org.apache.juli.ClassLoaderLogManager -server -DLOGINSIGHT_HOME=\u002Fusr\u002Flib\u002Floginsight -Dorg.bouncycastle.fips.approved_only=false -Dorg.apache.jasper.runtime.BodyContentImpl.LIMIT_BUFFER=true -Djava.awt.headless=true -Dorg.apache.jasper.runtime.JspFactoryImpl.USE_POOL=false -Djdk.tls.rejectClientInitiatedRenegotiation=true -Dorg.apache.el.parser.SKIP_IDENTIFIER_CHECK=true -Djavax.net.ssl.trustStorePassword=changeit -Djava.endorsed.dirs= -classpath \u002Fusr\u002Flib\u002Floginsight\u002Fapplication\u002F3rd_party\u002Fapache-tomcat-8.5.82\u002Flog4j2\u002Flib\u002F*:\u002Fusr\u002Flib\u002Floginsight\u002Fapplication\u002F3rd_party\u002Fapache-tomcat-8.5.82\u002Flog4j2\u002Fconf:\u002Fusr\u002Flib\u002Floginsight\u002Fapplication\u002F3rd_party\u002Fapache-tomcat-8.5.82\u002Fbin\u002Fbootstrap.jar:\u002Fusr\u002Flib\u002Floginsight\u002Fapplication\u002F3rd_party\u002Fapache-tomcat-8.5.82\u002Fbin\u002Ftomcat-juli.jar -Dcatalina.base=\u002Fusr\u002Flib\u002Floginsight\u002Fapplication\u002F3rd_party\u002Fapache-tomcat-8.5.82 -Dcatalina.home=\u002Fusr\u002Flib\u002Floginsight\u002Fapplication\u002F3rd_party\u002Fapache-tomcat-8.5.82 -Djava.io.tmpdir=\u002Fusr\u002Flib\u002Floginsight\u002Fapplication\u002F3rd_party\u002Fapache-tomcat-8.5.82\u002Ftemp org.apache.catalina.startup.Bootstrap start\u003Cbr>root      3097  1.7 33.0 2860656 1336624 ?     SLl  00:06   2:31 \u002Fusr\u002Fbin\u002Fjava -Xloggc:\u002Fusr\u002Flib\u002Floginsight\u002Fapplication\u002Flib\u002Fapache-cassandra-3.11.11\u002Fbin\u002F..\u002Flogs\u002Fgc.log -ea -XX:+UseThreadPriorities -XX:ThreadPriorityPolicy=42 -XX:+HeapDumpOnOutOfMemoryError -Xss256k -XX:StringTableSize=1000003 -XX:+AlwaysPreTouch -XX:-UseBiasedLocking -XX:+UseTLAB -XX:+ResizeTLAB -XX:+UseNUMA -XX:+PerfDisableSharedMem -Djava.net.preferIPv4Stack=true -XX:+UseParNewGC -XX:+UseConcMarkSweepGC -XX:+CMSParallelRemarkEnabled -XX:SurvivorRatio=8 -XX:MaxTenuringThreshold=1 -XX:CMSInitiatingOccupancyFraction=75 -XX:+UseCMSInitiatingOccupancyOnly -XX:CMSWaitDuration=10000 -XX:+CMSParallelInitialMarkEnabled -XX:+CMSEdenChunksRecordAlways -XX:+CMSClassUnloadingEnabled -XX:+PrintGCDetails -XX:+PrintGCDateStamps -XX:+PrintHeapAtGC -XX:+PrintTenuringDistribution -XX:+PrintGCApplicationStoppedTime -XX:+PrintPromotionFailure -XX:+UseGCLogFileRotation -XX:NumberOfGCLogFiles=10 -XX:GCLogFileSize=10M -Xms1024M -Xmx1024M -Xmn200M -XX:+UseCondCardMark -XX:CompileCommandFile=\u002Fstorage\u002Fcore\u002Floginsight\u002Fcidata\u002Fcassandra\u002Fconfig\u002Fhotspot_compiler -javaagent:\u002Fusr\u002Flib\u002Floginsight\u002Fapplication\u002Flib\u002Fapache-cassandra-3.11.11\u002Fbin\u002F..\u002Flib\u002Fjamm-0.3.0.jar -Djava.rmi.server.hostname=192.168.112.156 -Dcassandra.jmx.local.port=7199 -Dcom.sun.management.jmxremote.authenticate=true -Dcom.sun.management.jmxremote.password.file=\u002Fstorage\u002Fcore\u002Floginsight\u002Fcidata\u002Fcassandra\u002Fconfig\u002Fjmxremote.password -Djava.library.path=\u002Fusr\u002Flib\u002Floginsight\u002Fapplication\u002Flib\u002Fapache-cassandra-3.11.11\u002Fbin\u002F..\u002Flib\u002Fsigar-bin -Dcassandra.consistent.rangemovement=false -XX:OnOutOfMemoryError=kill -9 %p -Dlogback.configurationFile=logback.xml -Dcassandra.logdir=\u002Fusr\u002Flib\u002Floginsight\u002Fapplication\u002Flib\u002Fapache-cassandra-3.11.11\u002Fbin\u002F..\u002Flogs -Dcassandra.storagedir=\u002Fusr\u002Flib\u002Floginsight\u002Fapplication\u002Flib\u002Fapache-cassandra-3.11.11\u002Fbin\u002F..\u002Fdata -Dcassandra-foreground=yes -cp \u002Fstorage\u002Fcore\u002Floginsight\u002Fcidata\u002Fcassandra\u002Fconfig:\u002Fusr\u002Flib\u002Floginsight\u002Fapplication\u002Flib\u002Fapache-cassandra-3.11.11\u002Fbin\u002F..\u002Fbuild\u002Fclasses\u002Fmain:\u002Fusr\u002Flib\u002Floginsight\u002Fapplication\u002Flib\u002Fapache-cassandra-3.11.11\u002Fbin\u002F..\u002Fbuild\u002Fclasses\u002Fthrift:\u002Fusr\u002Flib\u002Floginsight\u002Fapplication\u002Flib\u002Fapache-cassandra-3.11.11\u002Fbin\u002F..\u002Flib\u002Fairline-0.6.jar:\u002Fusr\u002Flib\u002Floginsight\u002Fapplication\u002Flib\u002Fapache-cassandra-3.11.11\u002Fbin\u002F..\u002Flib\u002Fantlr-runtime-3.5.2.jar:\u002Fusr\u002Flib\u002Floginsight\u002Fapplication\u002Flib\u002Fapache-cassandra-3.11.11\u002Fbin\u002F..\u002Flib\u002Fapache-cassandra-3.11.11.jar:\u002Fusr\u002Flib\u002Floginsight\u002Fapplication\u002Flib\u002Fapache-cassandra-3.11.11\u002Fbin\u002F..\u002Flib\u002Fapache-cassandra-thrift-3.11.11.jar:\u002Fusr\u002Flib\u002Floginsight\u002Fapplication\u002Flib\u002Fapache-cassandra-3.11.11\u002Fbin\u002F..\u002Flib\u002Fasm-5.0.4.jar:\u002Fusr\u002Flib\u002Floginsight\u002Fapplication\u002Flib\u002Fapache-cassandra-3.11.11\u002Fbin\u002F..\u002Flib\u002Fcaffeine-2.2.6.jar:\u002Fusr\u002Flib\u002Floginsight\u002Fapplication\u002Flib\u002Fapache-cassandra-3.11.11\u002Fbin\u002F..\u002Flib\u002Fcassandra-driver-core-3.0.1-shaded.jar:\u002Fusr\u002Flib\u002Floginsight\u002Fapplication\u002Flib\u002Fapache-cassandra-3.11.11\u002Fbin\u002F..\u002Flib\u002Fcommons-cli-1.1.jar:\u002Fusr\u002Flib\u002Floginsight\u002Fapplication\u002Flib\u002Fapache-cassandra-3.11.11\u002Fbin\u002F..\u002Flib\u002Fcommons-codec-1.9.jar:\u002Fusr\u002Flib\u002Floginsight\u002Fapplication\u002Flib\u002Fapache-cassandra-3.11.11\u002Fbin\u002F..\u002Flib\u002Fcommons-lang3-3.1.jar:\u002Fusr\u002Flib\u002Floginsight\u002Fapplication\u002Flib\u002Fapache-cassandra-3.11.11\u002Fbin\u002F..\u002Flib\u002Fcommons-math3-3.2.jar:\u002Fusr\u002Flib\u002Floginsight\u002Fapplication\u002Flib\u002Fapache-cassandra-3.11.11\u002Fbin\u002F..\u002Flib\u002Fcompress-lzf-0.8.4.jar:\u002Fusr\u002Flib\u002Floginsight\u002Fapplication\u002Flib\u002Fapache-cassandra-3.11.11\u002Fbin\u002F..\u002Flib\u002Fconcurrentlinkedhashmap-lru-1.4.jar:\u002Fusr\u002Flib\u002Floginsight\u002Fapplication\u002Flib\u002Fapache-cassandra-3.11.11\u002Fbin\u002F..\u002Flib\u002Fconcurrent-trees-2.4.0.jar:\u002Fusr\u002Flib\u002Floginsight\u002Fapplication\u002Flib\u002Fapache-cassandra-3.11.11\u002Fbin\u002F..\u002Flib\u002Fdisruptor-3.0.1.jar:\u002Fusr\u002Flib\u002Floginsight\u002Fapplication\u002Flib\u002Fapache-cassandra-3.11.11\u002Fbin\u002F..\u002Flib\u002Fecj-4.4.2.jar:\u002Fusr\u002Flib\u002Floginsight\u002Fapplication\u002Flib\u002Fapache-cassandra-3.11.11\u002Fbin\u002F..\u002Flib\u002Fguava-18.0.jar:\u002Fusr\u002Flib\u002Floginsight\u002Fapplication\u002Flib\u002Fapache-cassandra-3.11.11\u002Fbin\u002F..\u002Flib\u002FHdrHistogram-2.1.9.jar:\u002Fusr\u002Flib\u002Floginsight\u002Fapplication\u002Flib\u002Fapache-cassandra-3.11.11\u002Fbin\u002F..\u002Flib\u002Fhigh-scale-lib-1.0.6.jar:\u002Fusr\u002Flib\u002Floginsight\u002Fapplication\u002Flib\u002Fapache-cassandra-3.11.11\u002Fbin\u002F..\u002Flib\u002Fhppc-0.5.4.jar:\u002Fusr\u002Flib\u002Floginsight\u002Fapplication\u002Flib\u002Fapache-cassandra-3.11.11\u002Fbin\u002F..\u002Flib\u002Fjackson-annotations-2.9.10.jar:\u002Fusr\u002Flib\u002Floginsight\u002Fapplication\u002Flib\u002Fapache-cassandra-3.11.11\u002Fbin\u002F..\u002Flib\u002Fjackson-core-2.9.10.jar:\u002Fusr\u002Flib\u002Floginsight\u002Fapplication\u002Flib\u002Fapache-cassandra-3.11.11\u002Fbin\u002F..\u002Flib\u002Fjackson-databind-2.9.10.8.jar:\u002Fusr\u002Flib\u002Floginsight\u002Fapplication\u002Flib\u002Fapache-cassandra-3.11.11\u002Fbin\u002F..\u002Flib\u002Fjamm-0.3.0.jar:\u002Fusr\u002Flib\u002Floginsight\u002Fapplication\u002Flib\u002Fapache-cassandra-3.11.11\u002Fbin\u002F..\u002Flib\u002Fjavax.inject-1.jar:\u002Fusr\u002Flib\u002Floginsight\u002Fapplication\u002Flib\u002Fapache-cassandra-3.11.11\u002Fbin\u002F..\u002Flib\u002Fjbcrypt-0.3m.jar:\u002Fusr\u002Flib\u002Floginsight\u002Fapplication\u002Flib\u002Fapache-cassandra-3.11.11\u002Fbin\u002F..\u002Flib\u002Fjcl-over-slf4j-1.7.7.jar:\u002Fusr\u002Flib\u002Floginsight\u002Fapplication\u002Flib\u002Fapache-cassandra-3.11.11\u002Fbin\u002F..\u002Flib\u002Fjctools-core-1.2.1.jar:\u002Fusr\u002Flib\u002Floginsight\u002Fapplication\u002Flib\u002Fapache-cassandra-3.11.11\u002Fbin\u002F..\u002Flib\u002Fjflex-1.6.0.jar:\u002Fusr\u002Flib\u002Floginsight\u002Fapplication\u002Flib\u002Fapache-cassandra-3.11.11\u002Fbin\u002F..\u002Flib\u002Fjna-4.2.2.jar:\u002Fusr\u002Flib\u002Floginsight\u002Fapplication\u002Flib\u002Fapache-cassandra-3.11.11\u002Fbin\u002F..\u002Flib\u002Fjoda-time-2.4.jar:\u002Fusr\u002Flib\u002Floginsight\u002Fapplication\u002Flib\u002Fapache-cassandra-3.11.11\u002Fbin\u002F..\u002Flib\u002Fjson-simple-1.1.jar:\u002Fusr\u002Flib\u002Floginsight\u002Fapplication\u002Flib\u002Fapache-cassandra-3.11.11\u002Fbin\u002F..\u002Flib\u002Flibthrift-0.9.2.jar:\u002Fusr\u002Flib\u002Floginsight\u002Fapplication\u002Flib\u002Fapache-cassandra-3.11.11\u002Fbin\u002F..\u002Flib\u002Flog4j-api-2.17.1.jar:\u002Fusr\u002Flib\u002Floginsight\u002Fapplication\u002Flib\u002Fapache-cassandra-3.11.11\u002Fbin\u002F..\u002Flib\u002Flog4j-core-2.17.1.jar:\u002Fusr\u002Flib\u002Floginsight\u002Fapplication\u002Flib\u002Fapache-cassandra-3.11.11\u002Fbin\u002F..\u002Flib\u002Flog4j-over-slf4j-1.7.7.jar:\u002Fusr\u002Flib\u002Floginsight\u002Fapplication\u002Flib\u002Fapache-cassandra-3.11.11\u002Fbin\u002F..\u002Flib\u002Flog4j-slf4j-impl-2.17.1.jar:\u002Fusr\u002Flib\u002Floginsight\u002Fapplication\u002Flib\u002Fapache-cassandra-3.11.11\u002Fbin\u002F..\u002Flib\u002Flogback-classic-1.1.3.jar:\u002Fusr\u002Flib\u002Floginsight\u002Fapplication\u002Flib\u002Fapache-cassandra-3.11.11\u002Fbin\u002F..\u002Flib\u002Flogback-core-1.1.3.jar:\u002Fusr\u002Flib\u002Floginsight\u002Fapplication\u002Flib\u002Fapache-cassandra-3.11.11\u002Fbin\u002F..\u002Flib\u002Flz4-1.3.0.jar:\u002Fusr\u002Flib\u002Floginsight\u002Fapplication\u002Flib\u002Fapache-cassandra-3.11.11\u002Fbin\u002F..\u002Flib\u002Fmetrics-core-3.1.5.jar:\u002Fusr\u002Flib\u002Floginsight\u002Fapplication\u002Flib\u002Fapache-cassandra-3.11.11\u002Fbin\u002F..\u002Flib\u002Fmetrics-jvm-3.1.5.jar:\u002Fusr\u002Flib\u002Floginsight\u002Fapplication\u002Flib\u002Fapache-cassandra-3.11.11\u002Fbin\u002F..\u002Flib\u002Fmetrics-logback-3.1.5.jar:\u002Fusr\u002Flib\u002Floginsight\u002Fapplication\u002Flib\u002Fapache-cassandra-3.11.11\u002Fbin\u002F..\u002Flib\u002Fnetty-all-4.0.44.Final.jar:\u002Fusr\u002Flib\u002Floginsight\u002Fapplication\u002Flib\u002Fapache-cassandra-3.11.11\u002Fbin\u002F..\u002Flib\u002Fohc-core-0.4.4.jar:\u002Fusr\u002Flib\u002Floginsight\u002Fapplication\u002Flib\u002Fapache-cassandra-3.11.11\u002Fbin\u002F..\u002Flib\u002Fohc-core-j8-0.4.4.jar:\u002Fusr\u002Flib\u002Floginsight\u002Fapplication\u002Flib\u002Fapache-cassandra-3.11.11\u002Fbin\u002F..\u002Flib\u002Freporter-config3-3.0.3.jar:\u002Fusr\u002Flib\u002Floginsight\u002Fapplication\u002Flib\u002Fapache-cassandra-3.11.11\u002Fbin\u002F..\u002Flib\u002Freporter-config-base-3.0.3.jar:\u002Fusr\u002Flib\u002Floginsight\u002Fapplication\u002Flib\u002Fapache-cassandra-3.11.11\u002Fbin\u002F..\u002Flib\u002Fsigar-1.6.4.jar:\u002Fusr\u002Flib\u002Floginsight\u002Fapplication\u002Flib\u002Fapache-cassandra-3.11.11\u002Fbin\u002F..\u002Flib\u002Fslf4j-api-1.7.30.jar:\u002Fusr\u002Flib\u002Floginsight\u002Fapplication\u002Flib\u002Fapache-cassandra-3.11.11\u002Fbin\u002F..\u002Flib\u002Fslf4j-api-1.7.7.jar:\u002Fusr\u002Flib\u002Floginsight\u002Fapplication\u002Flib\u002Fapache-cassandra-3.11.11\u002Fbin\u002F..\u002Flib\u002Fsnakeyaml-1.11.jar:\u002Fusr\u002Flib\u002Floginsight\u002Fapplication\u002Flib\u002Fapache-cassandra-3.11.11\u002Fbin\u002F..\u002Flib\u002Fsnappy-java-1.1.1.7.jar:\u002Fusr\u002Flib\u002Floginsight\u002Fapplication\u002Flib\u002Fapache-cassandra-3.11.11\u002Fbin\u002F..\u002Flib\u002Fsnowball-stemmer-1.3.0.581.1.jar:\u002Fusr\u002Flib\u002Floginsight\u002Fapplication\u002Flib\u002Fapache-cassandra-3.11.11\u002Fbin\u002F..\u002Flib\u002FST4-4.0.8.jar:\u002Fusr\u002Flib\u002Floginsight\u002Fapplication\u002Flib\u002Fapache-cassandra-3.11.11\u002Fbin\u002F..\u002Flib\u002Fstream-2.5.2.jar:\u002Fusr\u002Flib\u002Floginsight\u002Fapplication\u002Flib\u002Fapache-cassandra-3.11.11\u002Fbin\u002F..\u002Flib\u002Fthrift-server-0.3.7.jar:\u002Fusr\u002Flib\u002Floginsight\u002Fapplication\u002Flib\u002Fapache-cassandra-3.11.11\u002Fbin\u002F..\u002Flib\u002Fjsr223\u002F*\u002F*.jar: org.apache.cassandra.service.CassandraDaemon\u003C\u002Fp>\u003C\u002Ftd>\u003C\u002Ftr>\u003C\u002Ftbody>\u003C\u002Ftable>\u003Cp>Result analysis is as follows:\u003C\u002Fp>\u003Cp>\u003Cstrong>Process 1977:\u003C\u002Fstrong>\u003C\u002Fp>\u003Cp>Process parameters correspond to file: \u002Fusr\u002Flib\u002Floginsight\u002Fapplication\u002Fsbin\u002Floginsight-daemon.sh\u003C\u002Fp>\u003Cp>Corresponding lib folder: \u002Fusr\u002Flib\u002Floginsight\u002Fapplication\u002Flib\u002F\u003C\u002Fp>\u003Cp>\u003Cstrong>Process 2157:\u003C\u002Fstrong>\u003C\u002Fp>\u003Cp>Process parameters correspond to file: \u002Fusr\u002Flib\u002Floginsight\u002Fapplication\u002Fsbin\u002FvI18nManager\u003C\u002Fp>\u003Cp>Corresponding lib file: \u002Fusr\u002Flib\u002Floginsight\u002Fapplication\u002F3rd_party\u002FvI18nManager-logInsight-8.10.latest.jar\u003C\u002Fp>\u003Cp>\u003Cstrong>Process 2327:\u003C\u002Fstrong>\u003C\u002Fp>\u003Cp>Process parameter corresponding file: \u002Fusr\u002Flib\u002Floginsight\u002Fapplication\u002F3rd_party\u002Fapache-tomcat-8.5.82\u002Fbin\u002Fcatalina.sh\u003C\u002Fp>\u003Cp>Corresponding lib folder: \u002Fusr\u002Flib\u002Floginsight\u002Fapplication\u002F3rd_party\u002Fapache-tomcat-8.5.82\u002F\u003C\u002Fp>\u003Cp>\u003Cstrong>Process 3097:\u003C\u002Fstrong>\u003C\u002Fp>\u003Cp>Process parameter corresponding file: \u002Fusr\u002Flib\u002Floginsight\u002Fapplication\u002Flib\u002Fapache-cassandra-3.11.11\u002Fconf\u002Fjvm.options\u003C\u002Fp>\u003Cp>Corresponding lib folder: \u002Fusr\u002Flib\u002Floginsight\u002Fapplication\u002Flib\u002Fapache-cassandra-3.11.11\u002Flib\u002F\u003C\u002Fp>\u003Cp>Method to add debug parameters to process 3097:\u003C\u002Fp>\u003Cp>Modify file \u002Fusr\u002Flib\u002Floginsight\u002Fapplication\u002Flib\u002Fapache-cassandra-3.11.11\u002Fconf\u002Fjvm.options\u003C\u002Fp>\u003Cp>Add content: -agentlib:jdwp=transport=dt_socket,server=y,suspend=n,address=1414\u003C\u002Fp>\u003Cp>Restart service: service loginsight restart\u003C\u002Fp>\u003Cp>Add firewall rule: iptables -I INPUT -p tcp --dport 1414 -j ACCEPT\u003C\u002Fp>\u003Ch2>0x03 Database Operations\u003C\u002Fh2>\u003Cp>---\u003C\u002Fp>\u003Ch3>1. Reset web login user admin password\u003C\u002Fh3>\u003Cp>Implementation file: \u002Fusr\u002Flib\u002Floginsight\u002Fapplication\u002Fsbin\u002Fli-reset-admin-passwd.sh\u003C\u002Fp>\u003Cp>Database operation-related information can be obtained from the file, as shown in the figure below\u003C\u002Fp>\u003Cp>\u003Cimg alt=\"Alt text\" src=\"\u002Fuploads\u002Fdocx_image_1770015147703_2_4bb28201b3.png\">\u003C\u002Fp>\u003Ch3>2. Command parameters for connecting to the database\u003C\u002Fh3>\u003Cp>Implementation file: \u002Fusr\u002Flib\u002Floginsight\u002Fapplication\u002Flib\u002Fapache-cassandra-3.11.11\u002Fbin\u002Fcqlsh-no-pass\u003C\u002Fp>\u003Cp>The file content is as follows:\u003C\u002Fp>\u003Ctable>\u003Ctbody>\u003Ctr>\u003Ctd>\u003Cp>_bin() {\u003Cbr>    local CASSANDRA_BIN=$(find $BASE -name nodetool | sort | tail -n 1)\u003Cbr>    if [ ! -e \"$CASSANDRA_BIN\" ]; then\u003Cbr>        echo \"ERROR: Unable to locate Cassandra's bin directory!\"\u003Cbr>        exit 255\u003Cbr>    else\u003Cbr>        # Echo the bin directory\u003Cbr>        echo ${CASSANDRA_BIN%\u002F*}\u003Cbr>    fi\u003Cbr>    return 0\u003Cbr>}\u003Cbr>\u003Cbr>BASE=\"$(dirname $(readlink -f $0 2>\u002Fdev\u002Fnull) 2>\u002Fdev\u002Fnull)\u002F\"\u003Cbr>if [ $? != 0  ]; then\u003Cbr>    # If mac then no need to worry about symlink\u003Cbr>    BASE=\"$(dirname $0)\"\u003Cbr>    BASE=\"${BASE%.*}\"\u003Cbr>    if [ ! -z \"$BASE\" ]; then\u003Cbr>        BASE=\"$BASE\u002F\";\u003Cbr>    fi\u003Cbr>elif [ \"$BASE\" == \"\u002Fopt\u002Fvmware\u002Fbin\u002F\" ]; then\u003Cbr>    BASE=\"\u002Fusr\u002Flib\u002Floginsight\u002Fapplication\u002Flib\u002Fapache-cassandra-*\"\u003Cbr>fi\u003Cbr>\u003Cbr>CASSANDRA_BIN=$(_bin)\u003Cbr>if [ $? != 0 ]; then\u003Cbr>    echo $CASSANDRA_BIN\u003Cbr>    exit 255\u003Cbr>fi\u003Cbr>\u003Cbr>user_password=`$CASSANDRA_BIN\u002Fcredentials-look-up | tr \"\\n\" \" \" | sed 's\u002F.*\"\\(.*\\)\".*\"\\(.*\\)\".*\u002F\\1\\t\\2\u002Fg'`\u003Cbr>cuser=`echo \"${user_password}\" | cut -f1`\u003Cbr>cpassword=`echo \"${user_password}\" | cut -f2`\u003Cbr>\u003Cbr>$CASSANDRA_BIN\u002Fcqlsh -u $cuser -p $cpassword --cqlshrc=\u002Fstorage\u002Fcore\u002Floginsight\u002Fcidata\u002Fcassandra\u002Fconfig\u002Fcqlshrc \"$@\"r\u003C\u002Fp>\u003C\u002Ftd>\u003C\u002Ftr>\u003C\u002Ftbody>\u003C\u002Ftable>\u003Cp>Specific parameters for database operations can be obtained from the file:\u003C\u002Fp>\u003Cul>\u003Cli>Obtain username and password from $CASSANDRA_BIN\u002Fcredentials-look-up\u003C\u002Fli>\u003Cli>Configuration file is \u002Fstorage\u002Fcore\u002Floginsight\u002Fcidata\u002Fcassandra\u002Fconfig\u002Fcqlshrc\u003C\u002Fli>\u003C\u002Ful>\u003Ch3>3. Username and password for database connection\u003C\u002Fh3>\u003Cp>Implementation file: \u002Fusr\u002Flib\u002Floginsight\u002Fapplication\u002Flib\u002Fapache-cassandra-3.11.11\u002Fbin\u002Fcredentials-look-up\u003C\u002Fp>\u003Cp>Returns username and password after execution:\u003C\u002Fp>\u003Ctable>\u003Ctbody>\u003Ctr>\u003Ctd>\u003Cp>\u003Ccassandra-user value=\"lisuper\">\u003Cbr>\u003Ccassandra-password value=\"slshitn2@S\">\u003C\u002Fcassandra-password>\u003C\u002Fcassandra-user>\u003C\u002Fp>\u003C\u002Ftd>\u003C\u002Ftr>\u003C\u002Ftbody>\u003C\u002Ftable>\u003Cp>The implementation principle involves reading the file \u002Fstorage\u002Fcore\u002Floginsight\u002Fconfig\u002Floginsight-config.xml* and extracting plaintext username and password credentials from the XML file\u003C\u002Fp>\u003Ch3>4. Database connection configuration information\u003C\u002Fh3>\u003Cp>Implementation file: \u002Fstorage\u002Fcore\u002Floginsight\u002Fcidata\u002Fcassandra\u002Fconfig\u002Fcqlshrc\u003C\u002Fp>\u003Cp>File contents are as follows:\u003C\u002Fp>\u003Ctable>\u003Ctbody>\u003Ctr>\u003Ctd>\u003Cp>[connection]\u003Cbr>hostname = 127.0.0.1\u003Cbr>port = 9042\u003Cbr>client_timeout = 120\u003Cbr>ssl = true\u003Cbr>\u003Cbr>;[authentication]\u003Cbr>;username = cassandra\u003Cbr>;password = cassandra\u003Cbr>\u003Cbr>[ssl]\u003Cbr>certfile = \u002Fstorage\u002Fcore\u002Floginsight\u002Fcidata\u002Fcassandra\u002Fconfig\u002Fcacert.pem\u003Cbr>;usercert = cert.pem\u003Cbr>;userkey = cert_key.pem\u003C\u002Fp>\u003C\u002Ftd>\u003C\u002Ftr>\u003C\u002Ftbody>\u003C\u002Ftable>\u003Cp>Based on the above content, two methods for connecting to the database can be summarized:\u003C\u002Fp>\u003Ch4>(1) Using a file with pre-packaged parameters\u003C\u002Fh4>\u003Ctable>\u003Ctbody>\u003Ctr>\u003Ctd>\u003Cp>\u002Fusr\u002Flib\u002Floginsight\u002Fapplication\u002Flib\u002Fapache-cassandra-3.11.11\u002Fbin\u002Fcqlsh-no-pass\u003C\u002Fp>\u003C\u002Ftd>\u003C\u002Ftr>\u003C\u002Ftbody>\u003C\u002Ftable>\u003Ch4>(2) Connecting using parameters\u003C\u002Fh4>\u003Ctable>\u003Ctbody>\u003Ctr>\u003Ctd>\u003Cp>\u002Fusr\u002Flib\u002Floginsight\u002Fapplication\u002Flib\u002Fapache-cassandra-3.11.11\u002Fbin\u002Fcqlsh -u lisuper -p slshitn2@S --cqlshrc=\u002Fstorage\u002Fcore\u002Floginsight\u002Fcidata\u002Fcassandra\u002Fconfig\u002Fcqlshrc\u003C\u002Fp>\u003C\u002Ftd>\u003C\u002Ftr>\u003C\u002Ftbody>\u003C\u002Ftable>\u003Cp>From the returned results, it can be seen that the database uses CQL (Cassandra Query Language)\u003C\u002Fp>\u003Cp>Commands for querying user configuration:\u003C\u002Fp>\u003Ctable>\u003Ctbody>\u003Ctr>\u003Ctd>\u003Cp>select * from logdb.user;\u003Cbr>select * from logdb.user_auth;\u003C\u002Fp>\u003C\u002Ftd>\u003C\u002Ftr>\u003C\u002Ftbody>\u003C\u002Ftable>\u003Ch3>5. Graphical interface for database operations\u003C\u002Fh3>\u003Cp>Here, the software TablePlus is used\u003C\u002Fp>\u003Cp>Firewall configuration needs to be modified to open port 9042: iptables -I INPUT -p tcp --dport 9042 -j ACCEPT\u003C\u002Fp>\u003Cp>Certificate file to use: \u002Fstorage\u002Fcore\u002Floginsight\u002Fcidata\u002Fcassandra\u002Fconfig\u002Fcacert.pem\u003C\u002Fp>\u003Cp>Successful connection is shown in the figure below\u003C\u002Fp>\u003Cp>\u003Cimg alt=\"Alt text\" src=\"\u002Fuploads\u002Fdocx_image_1770015151129_3_e89e82a920.png\">\u003C\u002Fp>\u003Ch2>0x04 Summary\u003C\u002Fh2>\u003Cp>---\u003C\u002Fp>\u003Cp>After setting up the vRealize Log Insight vulnerability debugging environment, we can proceed to study the vulnerability.\u003C\u002Fp>\u003C\u002Fbody>\u003C\u002Fhtml>","text","ltr","\u003Chtml>\u003Chead>\u003C\u002Fhead>\u003Cbody>\u003Ch2>0x00 Preface\u003C\u002Fh2>\u003Cp>---\u003C\u002Fp>\u003Cp>This article documents the details of building a vRealize Log Insight vulnerability debugging environment from scratch.\u003C\u002Fp>\u003Ch2>0x01 Introduction\u003C\u002Fh2>\u003Cp>---\u003C\u002Fp>\u003Cp>This article will cover the following topics:\u003C\u002Fp>\u003Cul>\u003Cli>vRealize Log Insight Installation\u003C\u002Fli>\u003Cli>vRealize Log Insight Vulnerability Debugging Environment Configuration\u003C\u002Fli>\u003Cli>Database Operations\u003C\u002Fli>\u003C\u002Ful>\u003Ch2>0x02 vRealize Log Insight Installation\u003C\u002Fh2>\u003Cp>---\u003C\u002Fp>\u003Cp>Reference: https:\u002F\u002Fdocs.vmware.com\u002Fen\u002FvRealize-Log-Insight\u002Findex.html\u003C\u002Fp>\u003Ch3>1. Download OVA File\u003C\u002Fh3>\u003Cp>Download page: https:\u002F\u002Fcustomerconnect.vmware.com\u002Fevalcenter?p=vr-li\u003C\u002Fp>\u003Cp>Download requires user registration first, then select the desired version for download\u003C\u002Fp>\u003Ch3>2. Installation\u003C\u002Fh3>\u003Ch4>(1) Import the OVA file in VMware Workstation\u003C\u002Fh4>\u003Ch4>(2) Configuration\u003C\u002Fh4>\u003Cp>Access the configuration page at https:\u002F\u002F\u003Cip>\u002F\u003C\u002Fip>\u003C\u002Fp>\u003Cp>Select Starting New Deployment, set the admin user password\u003C\u002Fp>\u003Ch3>3. Enable remote debugging function\u003C\u002Fh3>\u003Ch4>(1) Check the status of all services\u003C\u002Fh4>\u003Ctable>\u003Ctbody>\u003Ctr>\u003Ctd>\u003Cp>systemctl status\u003C\u002Fp>\u003C\u002Ftd>\u003C\u002Ftr>\u003C\u002Ftbody>\u003C\u002Ftable>\u003Cp>Result as shown in the figure below\u003C\u002Fp>\u003Cp>\u003Cimg alt=\"Alt text\" src=\"\u002Fapi\u002Fmedia\u002Ffile\u002Fdocx_image_1770015140353_0_e527896f22-1.png\">\u003C\u002Fp>\u003Cp>Locate the web-related service as loginsight.service\u003C\u002Fp>\u003Ch4>(2) View detailed information of loginsight.service\u003C\u002Fh4>\u003Ctable>\u003Ctbody>\u003Ctr>\u003Ctd>\u003Cp>systemctl status loginsight.service\u003C\u002Fp>\u003C\u002Ftd>\u003C\u002Ftr>\u003C\u002Ftbody>\u003C\u002Ftable>\u003Cp>Result as shown in the figure below\u003C\u002Fp>\u003Cp>\u003Cimg alt=\"Alt text\" src=\"\u002Fapi\u002Fmedia\u002Ffile\u002Fdocx_image_1770015144679_1_7bbd11b7af-1.png\">\u003C\u002Fp>\u003Cp>Locate the service startup file: \u002Fusr\u002Flib\u002Floginsight\u002Fapplication\u002Fbin\u002Floginsight\u003C\u002Fp>\u003Ch4>(3) View process parameters\u003C\u002Fh4>\u003Cp>Execute command: ps aux|grep java\u003C\u002Fp>\u003Cp>Return result:\u003C\u002Fp>\u003Ctable>\u003Ctbody>\u003Ctr>\u003Ctd>\u003Cp>root      1977  4.7 34.5 4687676 1396852 ?     Sl   00:04   6:55 \u002Fusr\u002Flib\u002Floginsight\u002Fapplication\u002F3rd_party\u002Fbin\u002Fjava -Xrs -XX:+HeapDumpOnOutOfMemoryError -XX:HeapDumpPath=\u002Fstorage\u002Fcore\u002Floginsight\u002Fvar\u002Fheapdump\u002Fli_heapdump.hprof -XX:ErrorFile=\u002Fstorage\u002Fcore\u002Floginsight\u002Fvar\u002Fjvm_hs_err_pid.log -Djava.util.logging.config.level=SEVERE -Djdk.tls.ephemeralDHKeySize=2048 -Dorg.bouncycastle.fips.approved_only=false -Djavax.net.ssl.trustStorePassword=changeit -Djdk.http.auth.tunneling.disabledSchemes=\"\" -DLOGINSIGHT_HOME=\u002Fusr\u002Flib\u002Floginsight -Dstrata.pgid=1961 -cp \u002Fusr\u002Flib\u002Floginsight\u002Fapplication\u002Flib\u002F* -Xmx1972m -Xms1972m -Xss256k -Xmn1024M -XX:+UseConcMarkSweepGC -XX:+UseParNewGC -XX:CMSInitiatingOccupancyFraction=75 -XX:+UseCMSInitiatingOccupancyOnly -XX:+ScavengeBeforeFullGC -XX:TargetSurvivorRatio=80 -XX:SurvivorRatio=8 -XX:MaxTenuringThreshold=15 -XX:ParallelGCThreads=4 -XX:+UseCompressedOops -XX:+OptimizeStringConcat -XX:+AlwaysPreTouch com.vmware.loginsight.daemon.LogInsightDaemon --wait=120\u003Cbr>root      2157  0.1  2.0 2685308 84276 ?       Sl   00:04   0:17 \u002Fusr\u002Flib\u002Floginsight\u002Fapplication\u002F3rd_party\u002Fbin\u002Fjava -Xms100m -Xmx256m -jar -Dapp.log.home=\u002Fstorage\u002Fvar\u002Floginsight \u002Fusr\u002Flib\u002Floginsight\u002Fapplication\u002F3rd_party\u002FvI18nManager-logInsight-8.10.latest.jar --server.scheme=https -c --swagger-ui.enable=false\u003Cbr>root      2327  0.6 15.1 3577064 612048 ?      Sl   00:04   0:57 \u002Fusr\u002Flib\u002Floginsight\u002Fapplication\u002F3rd_party\u002Fbin\u002Fjava -Dnop -Djava.util.logging.manager=org.apache.juli.ClassLoaderLogManager -server -DLOGINSIGHT_HOME=\u002Fusr\u002Flib\u002Floginsight -Dorg.bouncycastle.fips.approved_only=false -Dorg.apache.jasper.runtime.BodyContentImpl.LIMIT_BUFFER=true -Djava.awt.headless=true -Dorg.apache.jasper.runtime.JspFactoryImpl.USE_POOL=false -Djdk.tls.rejectClientInitiatedRenegotiation=true -Dorg.apache.el.parser.SKIP_IDENTIFIER_CHECK=true -Djavax.net.ssl.trustStorePassword=changeit -Djava.endorsed.dirs= -classpath \u002Fusr\u002Flib\u002Floginsight\u002Fapplication\u002F3rd_party\u002Fapache-tomcat-8.5.82\u002Flog4j2\u002Flib\u002F*:\u002Fusr\u002Flib\u002Floginsight\u002Fapplication\u002F3rd_party\u002Fapache-tomcat-8.5.82\u002Flog4j2\u002Fconf:\u002Fusr\u002Flib\u002Floginsight\u002Fapplication\u002F3rd_party\u002Fapache-tomcat-8.5.82\u002Fbin\u002Fbootstrap.jar:\u002Fusr\u002Flib\u002Floginsight\u002Fapplication\u002F3rd_party\u002Fapache-tomcat-8.5.82\u002Fbin\u002Ftomcat-juli.jar -Dcatalina.base=\u002Fusr\u002Flib\u002Floginsight\u002Fapplication\u002F3rd_party\u002Fapache-tomcat-8.5.82 -Dcatalina.home=\u002Fusr\u002Flib\u002Floginsight\u002Fapplication\u002F3rd_party\u002Fapache-tomcat-8.5.82 -Djava.io.tmpdir=\u002Fusr\u002Flib\u002Floginsight\u002Fapplication\u002F3rd_party\u002Fapache-tomcat-8.5.82\u002Ftemp org.apache.catalina.startup.Bootstrap start\u003Cbr>root      3097  1.7 33.0 2860656 1336624 ?     SLl  00:06   2:31 \u002Fusr\u002Fbin\u002Fjava -Xloggc:\u002Fusr\u002Flib\u002Floginsight\u002Fapplication\u002Flib\u002Fapache-cassandra-3.11.11\u002Fbin\u002F..\u002Flogs\u002Fgc.log -ea -XX:+UseThreadPriorities -XX:ThreadPriorityPolicy=42 -XX:+HeapDumpOnOutOfMemoryError -Xss256k -XX:StringTableSize=1000003 -XX:+AlwaysPreTouch -XX:-UseBiasedLocking -XX:+UseTLAB -XX:+ResizeTLAB -XX:+UseNUMA -XX:+PerfDisableSharedMem -Djava.net.preferIPv4Stack=true -XX:+UseParNewGC -XX:+UseConcMarkSweepGC -XX:+CMSParallelRemarkEnabled -XX:SurvivorRatio=8 -XX:MaxTenuringThreshold=1 -XX:CMSInitiatingOccupancyFraction=75 -XX:+UseCMSInitiatingOccupancyOnly -XX:CMSWaitDuration=10000 -XX:+CMSParallelInitialMarkEnabled -XX:+CMSEdenChunksRecordAlways -XX:+CMSClassUnloadingEnabled -XX:+PrintGCDetails -XX:+PrintGCDateStamps -XX:+PrintHeapAtGC -XX:+PrintTenuringDistribution -XX:+PrintGCApplicationStoppedTime -XX:+PrintPromotionFailure -XX:+UseGCLogFileRotation -XX:NumberOfGCLogFiles=10 -XX:GCLogFileSize=10M -Xms1024M -Xmx1024M -Xmn200M -XX:+UseCondCardMark -XX:CompileCommandFile=\u002Fstorage\u002Fcore\u002Floginsight\u002Fcidata\u002Fcassandra\u002Fconfig\u002Fhotspot_compiler -javaagent:\u002Fusr\u002Flib\u002Floginsight\u002Fapplication\u002Flib\u002Fapache-cassandra-3.11.11\u002Fbin\u002F..\u002Flib\u002Fjamm-0.3.0.jar -Djava.rmi.server.hostname=192.168.112.156 -Dcassandra.jmx.local.port=7199 -Dcom.sun.management.jmxremote.authenticate=true -Dcom.sun.management.jmxremote.password.file=\u002Fstorage\u002Fcore\u002Floginsight\u002Fcidata\u002Fcassandra\u002Fconfig\u002Fjmxremote.password -Djava.library.path=\u002Fusr\u002Flib\u002Floginsight\u002Fapplication\u002Flib\u002Fapache-cassandra-3.11.11\u002Fbin\u002F..\u002Flib\u002Fsigar-bin -Dcassandra.consistent.rangemovement=false -XX:OnOutOfMemoryError=kill -9 %p -Dlogback.configurationFile=logback.xml -Dcassandra.logdir=\u002Fusr\u002Flib\u002Floginsight\u002Fapplication\u002Flib\u002Fapache-cassandra-3.11.11\u002Fbin\u002F..\u002Flogs -Dcassandra.storagedir=\u002Fusr\u002Flib\u002Floginsight\u002Fapplication\u002Flib\u002Fapache-cassandra-3.11.11\u002Fbin\u002F..\u002Fdata -Dcassandra-foreground=yes -cp \u002Fstorage\u002Fcore\u002Floginsight\u002Fcidata\u002Fcassandra\u002Fconfig:\u002Fusr\u002Flib\u002Floginsight\u002Fapplication\u002Flib\u002Fapache-cassandra-3.11.11\u002Fbin\u002F..\u002Fbuild\u002Fclasses\u002Fmain:\u002Fusr\u002Flib\u002Floginsight\u002Fapplication\u002Flib\u002Fapache-cassandra-3.11.11\u002Fbin\u002F..\u002Fbuild\u002Fclasses\u002Fthrift:\u002Fusr\u002Flib\u002Floginsight\u002Fapplication\u002Flib\u002Fapache-cassandra-3.11.11\u002Fbin\u002F..\u002Flib\u002Fairline-0.6.jar:\u002Fusr\u002Flib\u002Floginsight\u002Fapplication\u002Flib\u002Fapache-cassandra-3.11.11\u002Fbin\u002F..\u002Flib\u002Fantlr-runtime-3.5.2.jar:\u002Fusr\u002Flib\u002Floginsight\u002Fapplication\u002Flib\u002Fapache-cassandra-3.11.11\u002Fbin\u002F..\u002Flib\u002Fapache-cassandra-3.11.11.jar:\u002Fusr\u002Flib\u002Floginsight\u002Fapplication\u002Flib\u002Fapache-cassandra-3.11.11\u002Fbin\u002F..\u002Flib\u002Fapache-cassandra-thrift-3.11.11.jar:\u002Fusr\u002Flib\u002Floginsight\u002Fapplication\u002Flib\u002Fapache-cassandra-3.11.11\u002Fbin\u002F..\u002Flib\u002Fasm-5.0.4.jar:\u002Fusr\u002Flib\u002Floginsight\u002Fapplication\u002Flib\u002Fapache-cassandra-3.11.11\u002Fbin\u002F..\u002Flib\u002Fcaffeine-2.2.6.jar:\u002Fusr\u002Flib\u002Floginsight\u002Fapplication\u002Flib\u002Fapache-cassandra-3.11.11\u002Fbin\u002F..\u002Flib\u002Fcassandra-driver-core-3.0.1-shaded.jar:\u002Fusr\u002Flib\u002Floginsight\u002Fapplication\u002Flib\u002Fapache-cassandra-3.11.11\u002Fbin\u002F..\u002Flib\u002Fcommons-cli-1.1.jar:\u002Fusr\u002Flib\u002Floginsight\u002Fapplication\u002Flib\u002Fapache-cassandra-3.11.11\u002Fbin\u002F..\u002Flib\u002Fcommons-codec-1.9.jar:\u002Fusr\u002Flib\u002Floginsight\u002Fapplication\u002Flib\u002Fapache-cassandra-3.11.11\u002Fbin\u002F..\u002Flib\u002Fcommons-lang3-3.1.jar:\u002Fusr\u002Flib\u002Floginsight\u002Fapplication\u002Flib\u002Fapache-cassandra-3.11.11\u002Fbin\u002F..\u002Flib\u002Fcommons-math3-3.2.jar:\u002Fusr\u002Flib\u002Floginsight\u002Fapplication\u002Flib\u002Fapache-cassandra-3.11.11\u002Fbin\u002F..\u002Flib\u002Fcompress-lzf-0.8.4.jar:\u002Fusr\u002Flib\u002Floginsight\u002Fapplication\u002Flib\u002Fapache-cassandra-3.11.11\u002Fbin\u002F..\u002Flib\u002Fconcurrentlinkedhashmap-lru-1.4.jar:\u002Fusr\u002Flib\u002Floginsight\u002Fapplication\u002Flib\u002Fapache-cassandra-3.11.11\u002Fbin\u002F..\u002Flib\u002Fconcurrent-trees-2.4.0.jar:\u002Fusr\u002Flib\u002Floginsight\u002Fapplication\u002Flib\u002Fapache-cassandra-3.11.11\u002Fbin\u002F..\u002Flib\u002Fdisruptor-3.0.1.jar:\u002Fusr\u002Flib\u002Floginsight\u002Fapplication\u002Flib\u002Fapache-cassandra-3.11.11\u002Fbin\u002F..\u002Flib\u002Fecj-4.4.2.jar:\u002Fusr\u002Flib\u002Floginsight\u002Fapplication\u002Flib\u002Fapache-cassandra-3.11.11\u002Fbin\u002F..\u002Flib\u002Fguava-18.0.jar:\u002Fusr\u002Flib\u002Floginsight\u002Fapplication\u002Flib\u002Fapache-cassandra-3.11.11\u002Fbin\u002F..\u002Flib\u002FHdrHistogram-2.1.9.jar:\u002Fusr\u002Flib\u002Floginsight\u002Fapplication\u002Flib\u002Fapache-cassandra-3.11.11\u002Fbin\u002F..\u002Flib\u002Fhigh-scale-lib-1.0.6.jar:\u002Fusr\u002Flib\u002Floginsight\u002Fapplication\u002Flib\u002Fapache-cassandra-3.11.11\u002Fbin\u002F..\u002Flib\u002Fhppc-0.5.4.jar:\u002Fusr\u002Flib\u002Floginsight\u002Fapplication\u002Flib\u002Fapache-cassandra-3.11.11\u002Fbin\u002F..\u002Flib\u002Fjackson-annotations-2.9.10.jar:\u002Fusr\u002Flib\u002Floginsight\u002Fapplication\u002Flib\u002Fapache-cassandra-3.11.11\u002Fbin\u002F..\u002Flib\u002Fjackson-core-2.9.10.jar:\u002Fusr\u002Flib\u002Floginsight\u002Fapplication\u002Flib\u002Fapache-cassandra-3.11.11\u002Fbin\u002F..\u002Flib\u002Fjackson-databind-2.9.10.8.jar:\u002Fusr\u002Flib\u002Floginsight\u002Fapplication\u002Flib\u002Fapache-cassandra-3.11.11\u002Fbin\u002F..\u002Flib\u002Fjamm-0.3.0.jar:\u002Fusr\u002Flib\u002Floginsight\u002Fapplication\u002Flib\u002Fapache-cassandra-3.11.11\u002Fbin\u002F..\u002Flib\u002Fjavax.inject-1.jar:\u002Fusr\u002Flib\u002Floginsight\u002Fapplication\u002Flib\u002Fapache-cassandra-3.11.11\u002Fbin\u002F..\u002Flib\u002Fjbcrypt-0.3m.jar:\u002Fusr\u002Flib\u002Floginsight\u002Fapplication\u002Flib\u002Fapache-cassandra-3.11.11\u002Fbin\u002F..\u002Flib\u002Fjcl-over-slf4j-1.7.7.jar:\u002Fusr\u002Flib\u002Floginsight\u002Fapplication\u002Flib\u002Fapache-cassandra-3.11.11\u002Fbin\u002F..\u002Flib\u002Fjctools-core-1.2.1.jar:\u002Fusr\u002Flib\u002Floginsight\u002Fapplication\u002Flib\u002Fapache-cassandra-3.11.11\u002Fbin\u002F..\u002Flib\u002Fjflex-1.6.0.jar:\u002Fusr\u002Flib\u002Floginsight\u002Fapplication\u002Flib\u002Fapache-cassandra-3.11.11\u002Fbin\u002F..\u002Flib\u002Fjna-4.2.2.jar:\u002Fusr\u002Flib\u002Floginsight\u002Fapplication\u002Flib\u002Fapache-cassandra-3.11.11\u002Fbin\u002F..\u002Flib\u002Fjoda-time-2.4.jar:\u002Fusr\u002Flib\u002Floginsight\u002Fapplication\u002Flib\u002Fapache-cassandra-3.11.11\u002Fbin\u002F..\u002Flib\u002Fjson-simple-1.1.jar:\u002Fusr\u002Flib\u002Floginsight\u002Fapplication\u002Flib\u002Fapache-cassandra-3.11.11\u002Fbin\u002F..\u002Flib\u002Flibthrift-0.9.2.jar:\u002Fusr\u002Flib\u002Floginsight\u002Fapplication\u002Flib\u002Fapache-cassandra-3.11.11\u002Fbin\u002F..\u002Flib\u002Flog4j-api-2.17.1.jar:\u002Fusr\u002Flib\u002Floginsight\u002Fapplication\u002Flib\u002Fapache-cassandra-3.11.11\u002Fbin\u002F..\u002Flib\u002Flog4j-core-2.17.1.jar:\u002Fusr\u002Flib\u002Floginsight\u002Fapplication\u002Flib\u002Fapache-cassandra-3.11.11\u002Fbin\u002F..\u002Flib\u002Flog4j-over-slf4j-1.7.7.jar:\u002Fusr\u002Flib\u002Floginsight\u002Fapplication\u002Flib\u002Fapache-cassandra-3.11.11\u002Fbin\u002F..\u002Flib\u002Flog4j-slf4j-impl-2.17.1.jar:\u002Fusr\u002Flib\u002Floginsight\u002Fapplication\u002Flib\u002Fapache-cassandra-3.11.11\u002Fbin\u002F..\u002Flib\u002Flogback-classic-1.1.3.jar:\u002Fusr\u002Flib\u002Floginsight\u002Fapplication\u002Flib\u002Fapache-cassandra-3.11.11\u002Fbin\u002F..\u002Flib\u002Flogback-core-1.1.3.jar:\u002Fusr\u002Flib\u002Floginsight\u002Fapplication\u002Flib\u002Fapache-cassandra-3.11.11\u002Fbin\u002F..\u002Flib\u002Flz4-1.3.0.jar:\u002Fusr\u002Flib\u002Floginsight\u002Fapplication\u002Flib\u002Fapache-cassandra-3.11.11\u002Fbin\u002F..\u002Flib\u002Fmetrics-core-3.1.5.jar:\u002Fusr\u002Flib\u002Floginsight\u002Fapplication\u002Flib\u002Fapache-cassandra-3.11.11\u002Fbin\u002F..\u002Flib\u002Fmetrics-jvm-3.1.5.jar:\u002Fusr\u002Flib\u002Floginsight\u002Fapplication\u002Flib\u002Fapache-cassandra-3.11.11\u002Fbin\u002F..\u002Flib\u002Fmetrics-logback-3.1.5.jar:\u002Fusr\u002Flib\u002Floginsight\u002Fapplication\u002Flib\u002Fapache-cassandra-3.11.11\u002Fbin\u002F..\u002Flib\u002Fnetty-all-4.0.44.Final.jar:\u002Fusr\u002Flib\u002Floginsight\u002Fapplication\u002Flib\u002Fapache-cassandra-3.11.11\u002Fbin\u002F..\u002Flib\u002Fohc-core-0.4.4.jar:\u002Fusr\u002Flib\u002Floginsight\u002Fapplication\u002Flib\u002Fapache-cassandra-3.11.11\u002Fbin\u002F..\u002Flib\u002Fohc-core-j8-0.4.4.jar:\u002Fusr\u002Flib\u002Floginsight\u002Fapplication\u002Flib\u002Fapache-cassandra-3.11.11\u002Fbin\u002F..\u002Flib\u002Freporter-config3-3.0.3.jar:\u002Fusr\u002Flib\u002Floginsight\u002Fapplication\u002Flib\u002Fapache-cassandra-3.11.11\u002Fbin\u002F..\u002Flib\u002Freporter-config-base-3.0.3.jar:\u002Fusr\u002Flib\u002Floginsight\u002Fapplication\u002Flib\u002Fapache-cassandra-3.11.11\u002Fbin\u002F..\u002Flib\u002Fsigar-1.6.4.jar:\u002Fusr\u002Flib\u002Floginsight\u002Fapplication\u002Flib\u002Fapache-cassandra-3.11.11\u002Fbin\u002F..\u002Flib\u002Fslf4j-api-1.7.30.jar:\u002Fusr\u002Flib\u002Floginsight\u002Fapplication\u002Flib\u002Fapache-cassandra-3.11.11\u002Fbin\u002F..\u002Flib\u002Fslf4j-api-1.7.7.jar:\u002Fusr\u002Flib\u002Floginsight\u002Fapplication\u002Flib\u002Fapache-cassandra-3.11.11\u002Fbin\u002F..\u002Flib\u002Fsnakeyaml-1.11.jar:\u002Fusr\u002Flib\u002Floginsight\u002Fapplication\u002Flib\u002Fapache-cassandra-3.11.11\u002Fbin\u002F..\u002Flib\u002Fsnappy-java-1.1.1.7.jar:\u002Fusr\u002Flib\u002Floginsight\u002Fapplication\u002Flib\u002Fapache-cassandra-3.11.11\u002Fbin\u002F..\u002Flib\u002Fsnowball-stemmer-1.3.0.581.1.jar:\u002Fusr\u002Flib\u002Floginsight\u002Fapplication\u002Flib\u002Fapache-cassandra-3.11.11\u002Fbin\u002F..\u002Flib\u002FST4-4.0.8.jar:\u002Fusr\u002Flib\u002Floginsight\u002Fapplication\u002Flib\u002Fapache-cassandra-3.11.11\u002Fbin\u002F..\u002Flib\u002Fstream-2.5.2.jar:\u002Fusr\u002Flib\u002Floginsight\u002Fapplication\u002Flib\u002Fapache-cassandra-3.11.11\u002Fbin\u002F..\u002Flib\u002Fthrift-server-0.3.7.jar:\u002Fusr\u002Flib\u002Floginsight\u002Fapplication\u002Flib\u002Fapache-cassandra-3.11.11\u002Fbin\u002F..\u002Flib\u002Fjsr223\u002F*\u002F*.jar: org.apache.cassandra.service.CassandraDaemon\u003C\u002Fp>\u003C\u002Ftd>\u003C\u002Ftr>\u003C\u002Ftbody>\u003C\u002Ftable>\u003Cp>Result analysis is as follows:\u003C\u002Fp>\u003Cp>\u003Cstrong>Process 1977:\u003C\u002Fstrong>\u003C\u002Fp>\u003Cp>Process parameters correspond to file: \u002Fusr\u002Flib\u002Floginsight\u002Fapplication\u002Fsbin\u002Floginsight-daemon.sh\u003C\u002Fp>\u003Cp>Corresponding lib folder: \u002Fusr\u002Flib\u002Floginsight\u002Fapplication\u002Flib\u002F\u003C\u002Fp>\u003Cp>\u003Cstrong>Process 2157:\u003C\u002Fstrong>\u003C\u002Fp>\u003Cp>Process parameters correspond to file: \u002Fusr\u002Flib\u002Floginsight\u002Fapplication\u002Fsbin\u002FvI18nManager\u003C\u002Fp>\u003Cp>Corresponding lib file: \u002Fusr\u002Flib\u002Floginsight\u002Fapplication\u002F3rd_party\u002FvI18nManager-logInsight-8.10.latest.jar\u003C\u002Fp>\u003Cp>\u003Cstrong>Process 2327:\u003C\u002Fstrong>\u003C\u002Fp>\u003Cp>Process parameter corresponding file: \u002Fusr\u002Flib\u002Floginsight\u002Fapplication\u002F3rd_party\u002Fapache-tomcat-8.5.82\u002Fbin\u002Fcatalina.sh\u003C\u002Fp>\u003Cp>Corresponding lib folder: \u002Fusr\u002Flib\u002Floginsight\u002Fapplication\u002F3rd_party\u002Fapache-tomcat-8.5.82\u002F\u003C\u002Fp>\u003Cp>\u003Cstrong>Process 3097:\u003C\u002Fstrong>\u003C\u002Fp>\u003Cp>Process parameter corresponding file: \u002Fusr\u002Flib\u002Floginsight\u002Fapplication\u002Flib\u002Fapache-cassandra-3.11.11\u002Fconf\u002Fjvm.options\u003C\u002Fp>\u003Cp>Corresponding lib folder: \u002Fusr\u002Flib\u002Floginsight\u002Fapplication\u002Flib\u002Fapache-cassandra-3.11.11\u002Flib\u002F\u003C\u002Fp>\u003Cp>Method to add debug parameters to process 3097:\u003C\u002Fp>\u003Cp>Modify file \u002Fusr\u002Flib\u002Floginsight\u002Fapplication\u002Flib\u002Fapache-cassandra-3.11.11\u002Fconf\u002Fjvm.options\u003C\u002Fp>\u003Cp>Add content: -agentlib:jdwp=transport=dt_socket,server=y,suspend=n,address=1414\u003C\u002Fp>\u003Cp>Restart service: service loginsight restart\u003C\u002Fp>\u003Cp>Add firewall rule: iptables -I INPUT -p tcp --dport 1414 -j ACCEPT\u003C\u002Fp>\u003Ch2>0x03 Database Operations\u003C\u002Fh2>\u003Cp>---\u003C\u002Fp>\u003Ch3>1. Reset web login user admin password\u003C\u002Fh3>\u003Cp>Implementation file: \u002Fusr\u002Flib\u002Floginsight\u002Fapplication\u002Fsbin\u002Fli-reset-admin-passwd.sh\u003C\u002Fp>\u003Cp>Database operation-related information can be obtained from the file, as shown in the figure below\u003C\u002Fp>\u003Cp>\u003Cimg alt=\"Alt text\" src=\"\u002Fapi\u002Fmedia\u002Ffile\u002Fdocx_image_1770015147703_2_4bb28201b3-1.png\">\u003C\u002Fp>\u003Ch3>2. Command parameters for connecting to the database\u003C\u002Fh3>\u003Cp>Implementation file: \u002Fusr\u002Flib\u002Floginsight\u002Fapplication\u002Flib\u002Fapache-cassandra-3.11.11\u002Fbin\u002Fcqlsh-no-pass\u003C\u002Fp>\u003Cp>The file content is as follows:\u003C\u002Fp>\u003Ctable>\u003Ctbody>\u003Ctr>\u003Ctd>\u003Cp>_bin() {\u003Cbr>    local CASSANDRA_BIN=$(find $BASE -name nodetool | sort | tail -n 1)\u003Cbr>    if [ ! -e \"$CASSANDRA_BIN\" ]; then\u003Cbr>        echo \"ERROR: Unable to locate Cassandra's bin directory!\"\u003Cbr>        exit 255\u003Cbr>    else\u003Cbr>        # Echo the bin directory\u003Cbr>        echo ${CASSANDRA_BIN%\u002F*}\u003Cbr>    fi\u003Cbr>    return 0\u003Cbr>}\u003Cbr>\u003Cbr>BASE=\"$(dirname $(readlink -f $0 2>\u002Fdev\u002Fnull) 2>\u002Fdev\u002Fnull)\u002F\"\u003Cbr>if [ $? != 0  ]; then\u003Cbr>    # If mac then no need to worry about symlink\u003Cbr>    BASE=\"$(dirname $0)\"\u003Cbr>    BASE=\"${BASE%.*}\"\u003Cbr>    if [ ! -z \"$BASE\" ]; then\u003Cbr>        BASE=\"$BASE\u002F\";\u003Cbr>    fi\u003Cbr>elif [ \"$BASE\" == \"\u002Fopt\u002Fvmware\u002Fbin\u002F\" ]; then\u003Cbr>    BASE=\"\u002Fusr\u002Flib\u002Floginsight\u002Fapplication\u002Flib\u002Fapache-cassandra-*\"\u003Cbr>fi\u003Cbr>\u003Cbr>CASSANDRA_BIN=$(_bin)\u003Cbr>if [ $? != 0 ]; then\u003Cbr>    echo $CASSANDRA_BIN\u003Cbr>    exit 255\u003Cbr>fi\u003Cbr>\u003Cbr>user_password=`$CASSANDRA_BIN\u002Fcredentials-look-up | tr \"\\n\" \" \" | sed 's\u002F.*\"\\(.*\\)\".*\"\\(.*\\)\".*\u002F\\1\\t\\2\u002Fg'`\u003Cbr>cuser=`echo \"${user_password}\" | cut -f1`\u003Cbr>cpassword=`echo \"${user_password}\" | cut -f2`\u003Cbr>\u003Cbr>$CASSANDRA_BIN\u002Fcqlsh -u $cuser -p $cpassword --cqlshrc=\u002Fstorage\u002Fcore\u002Floginsight\u002Fcidata\u002Fcassandra\u002Fconfig\u002Fcqlshrc \"$@\"r\u003C\u002Fp>\u003C\u002Ftd>\u003C\u002Ftr>\u003C\u002Ftbody>\u003C\u002Ftable>\u003Cp>Specific parameters for database operations can be obtained from the file:\u003C\u002Fp>\u003Cul>\u003Cli>Obtain username and password from $CASSANDRA_BIN\u002Fcredentials-look-up\u003C\u002Fli>\u003Cli>Configuration file is \u002Fstorage\u002Fcore\u002Floginsight\u002Fcidata\u002Fcassandra\u002Fconfig\u002Fcqlshrc\u003C\u002Fli>\u003C\u002Ful>\u003Ch3>3. Username and password for database connection\u003C\u002Fh3>\u003Cp>Implementation file: \u002Fusr\u002Flib\u002Floginsight\u002Fapplication\u002Flib\u002Fapache-cassandra-3.11.11\u002Fbin\u002Fcredentials-look-up\u003C\u002Fp>\u003Cp>Returns username and password after execution:\u003C\u002Fp>\u003Ctable>\u003Ctbody>\u003Ctr>\u003Ctd>\u003Cp>\u003Ccassandra-user value=\"lisuper\">\u003Cbr>\u003Ccassandra-password value=\"slshitn2@S\">\u003C\u002Fcassandra-password>\u003C\u002Fcassandra-user>\u003C\u002Fp>\u003C\u002Ftd>\u003C\u002Ftr>\u003C\u002Ftbody>\u003C\u002Ftable>\u003Cp>The implementation principle involves reading the file \u002Fstorage\u002Fcore\u002Floginsight\u002Fconfig\u002Floginsight-config.xml* and extracting plaintext username and password credentials from the XML file\u003C\u002Fp>\u003Ch3>4. Database connection configuration information\u003C\u002Fh3>\u003Cp>Implementation file: \u002Fstorage\u002Fcore\u002Floginsight\u002Fcidata\u002Fcassandra\u002Fconfig\u002Fcqlshrc\u003C\u002Fp>\u003Cp>File contents are as follows:\u003C\u002Fp>\u003Ctable>\u003Ctbody>\u003Ctr>\u003Ctd>\u003Cp>[connection]\u003Cbr>hostname = 127.0.0.1\u003Cbr>port = 9042\u003Cbr>client_timeout = 120\u003Cbr>ssl = true\u003Cbr>\u003Cbr>;[authentication]\u003Cbr>;username = cassandra\u003Cbr>;password = cassandra\u003Cbr>\u003Cbr>[ssl]\u003Cbr>certfile = \u002Fstorage\u002Fcore\u002Floginsight\u002Fcidata\u002Fcassandra\u002Fconfig\u002Fcacert.pem\u003Cbr>;usercert = cert.pem\u003Cbr>;userkey = cert_key.pem\u003C\u002Fp>\u003C\u002Ftd>\u003C\u002Ftr>\u003C\u002Ftbody>\u003C\u002Ftable>\u003Cp>Based on the above content, two methods for connecting to the database can be summarized:\u003C\u002Fp>\u003Ch4>(1) Using a file with pre-packaged parameters\u003C\u002Fh4>\u003Ctable>\u003Ctbody>\u003Ctr>\u003Ctd>\u003Cp>\u002Fusr\u002Flib\u002Floginsight\u002Fapplication\u002Flib\u002Fapache-cassandra-3.11.11\u002Fbin\u002Fcqlsh-no-pass\u003C\u002Fp>\u003C\u002Ftd>\u003C\u002Ftr>\u003C\u002Ftbody>\u003C\u002Ftable>\u003Ch4>(2) Connecting using parameters\u003C\u002Fh4>\u003Ctable>\u003Ctbody>\u003Ctr>\u003Ctd>\u003Cp>\u002Fusr\u002Flib\u002Floginsight\u002Fapplication\u002Flib\u002Fapache-cassandra-3.11.11\u002Fbin\u002Fcqlsh -u lisuper -p slshitn2@S --cqlshrc=\u002Fstorage\u002Fcore\u002Floginsight\u002Fcidata\u002Fcassandra\u002Fconfig\u002Fcqlshrc\u003C\u002Fp>\u003C\u002Ftd>\u003C\u002Ftr>\u003C\u002Ftbody>\u003C\u002Ftable>\u003Cp>From the returned results, it can be seen that the database uses CQL (Cassandra Query Language)\u003C\u002Fp>\u003Cp>Commands for querying user configuration:\u003C\u002Fp>\u003Ctable>\u003Ctbody>\u003Ctr>\u003Ctd>\u003Cp>select * from logdb.user;\u003Cbr>select * from logdb.user_auth;\u003C\u002Fp>\u003C\u002Ftd>\u003C\u002Ftr>\u003C\u002Ftbody>\u003C\u002Ftable>\u003Ch3>5. Graphical interface for database operations\u003C\u002Fh3>\u003Cp>Here, the software TablePlus is used\u003C\u002Fp>\u003Cp>Firewall configuration needs to be modified to open port 9042: iptables -I INPUT -p tcp --dport 9042 -j ACCEPT\u003C\u002Fp>\u003Cp>Certificate file to use: \u002Fstorage\u002Fcore\u002Floginsight\u002Fcidata\u002Fcassandra\u002Fconfig\u002Fcacert.pem\u003C\u002Fp>\u003Cp>Successful connection is shown in the figure below\u003C\u002Fp>\u003Cp>\u003Cimg alt=\"Alt text\" src=\"\u002Fapi\u002Fmedia\u002Ffile\u002Fdocx_image_1770015151129_3_e89e82a920-1.png\">\u003C\u002Fp>\u003Ch2>0x04 Summary\u003C\u002Fh2>\u003Cp>---\u003C\u002Fp>\u003Cp>After setting up the vRealize Log Insight vulnerability debugging environment, we can proceed to study the vulnerability.\u003C\u002Fp>\u003C\u002Fbody>\u003C\u002Fhtml>",608,"Onedaysec",4,"published","2026-02-02T07:25:20.011Z",{"title":37,"description":14,"keywords":38,"ogImage":39,"canonicalUrl":39,"noIndex":40},"vRealize Log Insight Vulnerability Debugging Environment Setup Guide","vRealize Log Insight, vulnerability debugging, environment setup, VMware, OVA installation, remote debugging, database operations",null,false,[],{"docs":43,"hasNextPage":40},[44,4,45,46],944,942,941,{"title":39,"description":39,"image":39},"2026-07-24T15:37:10.681Z","2026-07-23T16:02:18.410Z","draft","2026-07-23T16:15:41.161Z"]