[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$fh2VqRO8UBqbeIsJ6oHqgGBFGpk12SIwaC70awU9UflU":3},{"id":4,"question":5,"answer":6,"answerHtml":7,"slug":8,"keywords":9,"article":10,"status":34,"aiModel":39,"aiConfidence":39,"updatedAt":51,"createdAt":51,"_status":50},942,"What are the initial steps to install vRealize Log Insight from scratch for vulnerability research?","First, download the OVA file from VMware's evaluation center (requires registration). Then, import the OVA into VMware Workstation and access the configuration page at `https:\u002F\u002F\u003CIP>\u002F`. Select 'Starting New Deployment' and set the admin password. This provides a base virtual appliance to later enable remote debugging, as described in the [vRealize Log Insight Vulnerability Debugging Environment Setup](\u002Fnews\u002Fvrealize-log-insight-vulnerability-debugging-environment) article.","\u003Cp>First, download the OVA file from VMware's evaluation center (requires registration). Then, import the OVA into VMware Workstation and access the configuration page at `https:\u002F\u002F<IP>\u002F`. Select 'Starting New Deployment' and set the admin password. This provides a base virtual appliance to later enable remote debugging, as described in the [vRealize Log Insight Vulnerability Debugging Environment Setup](\u002Fnews\u002Fvrealize-log-insight-vulnerability-debugging-environment) article.\u003C\u002Fp>\u003Cp>\u003Ca href=\"\u002Fnews\u002Fvrealize-log-insight-vulnerability-debugging-environment\">Read the related One Day Sec article\u003C\u002Fa>\u003C\u002Fp>","what-are-the-initial-steps-to-install-vrealize-log-insight-from-scratch-for-vuln-1777481292690","OVA file, VMware Workstation, deployment, admin password, evaluation center",{"id":11,"title":12,"slug":13,"description":14,"content":15,"contentHtml":30,"cover":31,"author":32,"views":19,"readingTime":33,"status":34,"publishedAt":35,"seo":36,"tags":41,"qaPairs":42,"meta":47,"updatedAt":48,"createdAt":49,"_status":50},229,"vRealize Log Insight Vulnerability Debugging Environment Setup","vrealize-log-insight-vulnerability-debugging-environment","Step-by-step guide to set up a vRealize Log Insight vulnerability debugging environment, covering installation, configuration, and remote debugging.",{"root":16},{"type":17,"format":18,"indent":19,"version":20,"children":21,"direction":29},"root","",0,1,[22],{"type":23,"format":18,"indent":19,"version":20,"children":24,"direction":29},"paragraph",[25],{"mode":26,"text":27,"type":28,"style":18,"detail":19,"format":19,"version":20},"normal","\u003Chtml>\u003Chead>\u003C\u002Fhead>\u003Cbody>\u003Ch2>0x00 Preface\u003C\u002Fh2>\u003Cp>---\u003C\u002Fp>\u003Cp>This article documents the details of building a vRealize Log Insight vulnerability debugging environment from scratch.\u003C\u002Fp>\u003Ch2>0x01 Introduction\u003C\u002Fh2>\u003Cp>---\u003C\u002Fp>\u003Cp>This article will cover the following topics:\u003C\u002Fp>\u003Cul>\u003Cli>vRealize Log Insight Installation\u003C\u002Fli>\u003Cli>vRealize Log Insight Vulnerability Debugging Environment Configuration\u003C\u002Fli>\u003Cli>Database Operations\u003C\u002Fli>\u003C\u002Ful>\u003Ch2>0x02 vRealize Log Insight Installation\u003C\u002Fh2>\u003Cp>---\u003C\u002Fp>\u003Cp>Reference: https:\u002F\u002Fdocs.vmware.com\u002Fen\u002FvRealize-Log-Insight\u002Findex.html\u003C\u002Fp>\u003Ch3>1. Download OVA File\u003C\u002Fh3>\u003Cp>Download page: https:\u002F\u002Fcustomerconnect.vmware.com\u002Fevalcenter?p=vr-li\u003C\u002Fp>\u003Cp>Download requires user registration first, then select the desired version for download\u003C\u002Fp>\u003Ch3>2. Installation\u003C\u002Fh3>\u003Ch4>(1) Import the OVA file in VMware Workstation\u003C\u002Fh4>\u003Ch4>(2) Configuration\u003C\u002Fh4>\u003Cp>Access the configuration page at https:\u002F\u002F\u003Cip>\u002F\u003C\u002Fip>\u003C\u002Fp>\u003Cp>Select Starting New Deployment, set the admin user password\u003C\u002Fp>\u003Ch3>3. Enable remote debugging function\u003C\u002Fh3>\u003Ch4>(1) Check the status of all services\u003C\u002Fh4>\u003Ctable>\u003Ctbody>\u003Ctr>\u003Ctd>\u003Cp>systemctl status\u003C\u002Fp>\u003C\u002Ftd>\u003C\u002Ftr>\u003C\u002Ftbody>\u003C\u002Ftable>\u003Cp>Result as shown in the figure below\u003C\u002Fp>\u003Cp>\u003Cimg alt=\"Alt text\" src=\"\u002Fuploads\u002Fdocx_image_1770015140353_0_e527896f22.png\">\u003C\u002Fp>\u003Cp>Locate the web-related service as loginsight.service\u003C\u002Fp>\u003Ch4>(2) View detailed information of loginsight.service\u003C\u002Fh4>\u003Ctable>\u003Ctbody>\u003Ctr>\u003Ctd>\u003Cp>systemctl status loginsight.service\u003C\u002Fp>\u003C\u002Ftd>\u003C\u002Ftr>\u003C\u002Ftbody>\u003C\u002Ftable>\u003Cp>Result as shown in the figure below\u003C\u002Fp>\u003Cp>\u003Cimg alt=\"Alt text\" src=\"\u002Fuploads\u002Fdocx_image_1770015144679_1_7bbd11b7af.png\">\u003C\u002Fp>\u003Cp>Locate the service startup file: \u002Fusr\u002Flib\u002Floginsight\u002Fapplication\u002Fbin\u002Floginsight\u003C\u002Fp>\u003Ch4>(3) View process parameters\u003C\u002Fh4>\u003Cp>Execute command: ps aux|grep java\u003C\u002Fp>\u003Cp>Return result:\u003C\u002Fp>\u003Ctable>\u003Ctbody>\u003Ctr>\u003Ctd>\u003Cp>root      1977  4.7 34.5 4687676 1396852 ?     Sl   00:04   6:55 \u002Fusr\u002Flib\u002Floginsight\u002Fapplication\u002F3rd_party\u002Fbin\u002Fjava -Xrs -XX:+HeapDumpOnOutOfMemoryError -XX:HeapDumpPath=\u002Fstorage\u002Fcore\u002Floginsight\u002Fvar\u002Fheapdump\u002Fli_heapdump.hprof -XX:ErrorFile=\u002Fstorage\u002Fcore\u002Floginsight\u002Fvar\u002Fjvm_hs_err_pid.log -Djava.util.logging.config.level=SEVERE -Djdk.tls.ephemeralDHKeySize=2048 -Dorg.bouncycastle.fips.approved_only=false -Djavax.net.ssl.trustStorePassword=changeit -Djdk.http.auth.tunneling.disabledSchemes=\"\" -DLOGINSIGHT_HOME=\u002Fusr\u002Flib\u002Floginsight -Dstrata.pgid=1961 -cp \u002Fusr\u002Flib\u002Floginsight\u002Fapplication\u002Flib\u002F* -Xmx1972m -Xms1972m -Xss256k -Xmn1024M -XX:+UseConcMarkSweepGC -XX:+UseParNewGC -XX:CMSInitiatingOccupancyFraction=75 -XX:+UseCMSInitiatingOccupancyOnly -XX:+ScavengeBeforeFullGC -XX:TargetSurvivorRatio=80 -XX:SurvivorRatio=8 -XX:MaxTenuringThreshold=15 -XX:ParallelGCThreads=4 -XX:+UseCompressedOops -XX:+OptimizeStringConcat -XX:+AlwaysPreTouch com.vmware.loginsight.daemon.LogInsightDaemon --wait=120\u003Cbr>root      2157  0.1  2.0 2685308 84276 ?       Sl   00:04   0:17 \u002Fusr\u002Flib\u002Floginsight\u002Fapplication\u002F3rd_party\u002Fbin\u002Fjava -Xms100m -Xmx256m -jar -Dapp.log.home=\u002Fstorage\u002Fvar\u002Floginsight \u002Fusr\u002Flib\u002Floginsight\u002Fapplication\u002F3rd_party\u002FvI18nManager-logInsight-8.10.latest.jar --server.scheme=https -c --swagger-ui.enable=false\u003Cbr>root      2327  0.6 15.1 3577064 612048 ?      Sl   00:04   0:57 \u002Fusr\u002Flib\u002Floginsight\u002Fapplication\u002F3rd_party\u002Fbin\u002Fjava -Dnop -Djava.util.logging.manager=org.apache.juli.ClassLoaderLogManager -server -DLOGINSIGHT_HOME=\u002Fusr\u002Flib\u002Floginsight -Dorg.bouncycastle.fips.approved_only=false -Dorg.apache.jasper.runtime.BodyContentImpl.LIMIT_BUFFER=true -Djava.awt.headless=true -Dorg.apache.jasper.runtime.JspFactoryImpl.USE_POOL=false -Djdk.tls.rejectClientInitiatedRenegotiation=true -Dorg.apache.el.parser.SKIP_IDENTIFIER_CHECK=true -Djavax.net.ssl.trustStorePassword=changeit -Djava.endorsed.dirs= -classpath \u002Fusr\u002Flib\u002Floginsight\u002Fapplication\u002F3rd_party\u002Fapache-tomcat-8.5.82\u002Flog4j2\u002Flib\u002F*:\u002Fusr\u002Flib\u002Floginsight\u002Fapplication\u002F3rd_party\u002Fapache-tomcat-8.5.82\u002Flog4j2\u002Fconf:\u002Fusr\u002Flib\u002Floginsight\u002Fapplication\u002F3rd_party\u002Fapache-tomcat-8.5.82\u002Fbin\u002Fbootstrap.jar:\u002Fusr\u002Flib\u002Floginsight\u002Fapplication\u002F3rd_party\u002Fapache-tomcat-8.5.82\u002Fbin\u002Ftomcat-juli.jar -Dcatalina.base=\u002Fusr\u002Flib\u002Floginsight\u002Fapplication\u002F3rd_party\u002Fapache-tomcat-8.5.82 -Dcatalina.home=\u002Fusr\u002Flib\u002Floginsight\u002Fapplication\u002F3rd_party\u002Fapache-tomcat-8.5.82 -Djava.io.tmpdir=\u002Fusr\u002Flib\u002Floginsight\u002Fapplication\u002F3rd_party\u002Fapache-tomcat-8.5.82\u002Ftemp org.apache.catalina.startup.Bootstrap start\u003Cbr>root      3097  1.7 33.0 2860656 1336624 ?     SLl  00:06   2:31 \u002Fusr\u002Fbin\u002Fjava -Xloggc:\u002Fusr\u002Flib\u002Floginsight\u002Fapplication\u002Flib\u002Fapache-cassandra-3.11.11\u002Fbin\u002F..\u002Flogs\u002Fgc.log -ea -XX:+UseThreadPriorities -XX:ThreadPriorityPolicy=42 -XX:+HeapDumpOnOutOfMemoryError -Xss256k -XX:StringTableSize=1000003 -XX:+AlwaysPreTouch -XX:-UseBiasedLocking -XX:+UseTLAB -XX:+ResizeTLAB -XX:+UseNUMA -XX:+PerfDisableSharedMem -Djava.net.preferIPv4Stack=true -XX:+UseParNewGC -XX:+UseConcMarkSweepGC -XX:+CMSParallelRemarkEnabled -XX:SurvivorRatio=8 -XX:MaxTenuringThreshold=1 -XX:CMSInitiatingOccupancyFraction=75 -XX:+UseCMSInitiatingOccupancyOnly -XX:CMSWaitDuration=10000 -XX:+CMSParallelInitialMarkEnabled -XX:+CMSEdenChunksRecordAlways -XX:+CMSClassUnloadingEnabled -XX:+PrintGCDetails -XX:+PrintGCDateStamps -XX:+PrintHeapAtGC -XX:+PrintTenuringDistribution -XX:+PrintGCApplicationStoppedTime -XX:+PrintPromotionFailure -XX:+UseGCLogFileRotation -XX:NumberOfGCLogFiles=10 -XX:GCLogFileSize=10M -Xms1024M -Xmx1024M -Xmn200M -XX:+UseCondCardMark -XX:CompileCommandFile=\u002Fstorage\u002Fcore\u002Floginsight\u002Fcidata\u002Fcassandra\u002Fconfig\u002Fhotspot_compiler -javaagent:\u002Fusr\u002Flib\u002Floginsight\u002Fapplication\u002Flib\u002Fapache-cassandra-3.11.11\u002Fbin\u002F..\u002Flib\u002Fjamm-0.3.0.jar -Djava.rmi.server.hostname=192.168.112.156 -Dcassandra.jmx.local.port=7199 -Dcom.sun.management.jmxremote.authenticate=true -Dcom.sun.management.jmxremote.password.file=\u002Fstorage\u002Fcore\u002Floginsight\u002Fcidata\u002Fcassandra\u002Fconfig\u002Fjmxremote.password -Djava.library.path=\u002Fusr\u002Flib\u002Floginsight\u002Fapplication\u002Flib\u002Fapache-cassandra-3.11.11\u002Fbin\u002F..\u002Flib\u002Fsigar-bin -Dcassandra.consistent.rangemovement=false -XX:OnOutOfMemoryError=kill -9 %p -Dlogback.configurationFile=logback.xml -Dcassandra.logdir=\u002Fusr\u002Flib\u002Floginsight\u002Fapplication\u002Flib\u002Fapache-cassandra-3.11.11\u002Fbin\u002F..\u002Flogs -Dcassandra.storagedir=\u002Fusr\u002Flib\u002Floginsight\u002Fapplication\u002Flib\u002Fapache-cassandra-3.11.11\u002Fbin\u002F..\u002Fdata -Dcassandra-foreground=yes -cp \u002Fstorage\u002Fcore\u002Floginsight\u002Fcidata\u002Fcassandra\u002Fconfig:\u002Fusr\u002Flib\u002Floginsight\u002Fapplication\u002Flib\u002Fapache-cassandra-3.11.11\u002Fbin\u002F..\u002Fbuild\u002Fclasses\u002Fmain:\u002Fusr\u002Flib\u002Floginsight\u002Fapplication\u002Flib\u002Fapache-cassandra-3.11.11\u002Fbin\u002F..\u002Fbuild\u002Fclasses\u002Fthrift:\u002Fusr\u002Flib\u002Floginsight\u002Fapplication\u002Flib\u002Fapache-cassandra-3.11.11\u002Fbin\u002F..\u002Flib\u002Fairline-0.6.jar:\u002Fusr\u002Flib\u002Floginsight\u002Fapplication\u002Flib\u002Fapache-cassandra-3.11.11\u002Fbin\u002F..\u002Flib\u002Fantlr-runtime-3.5.2.jar:\u002Fusr\u002Flib\u002Floginsight\u002Fapplication\u002Flib\u002Fapache-cassandra-3.11.11\u002Fbin\u002F..\u002Flib\u002Fapache-cassandra-3.11.11.jar:\u002Fusr\u002Flib\u002Floginsight\u002Fapplication\u002Flib\u002Fapache-cassandra-3.11.11\u002Fbin\u002F..\u002Flib\u002Fapache-cassandra-thrift-3.11.11.jar:\u002Fusr\u002Flib\u002Floginsight\u002Fapplication\u002Flib\u002Fapache-cassandra-3.11.11\u002Fbin\u002F..\u002Flib\u002Fasm-5.0.4.jar:\u002Fusr\u002Flib\u002Floginsight\u002Fapplication\u002Flib\u002Fapache-cassandra-3.11.11\u002Fbin\u002F..\u002Flib\u002Fcaffeine-2.2.6.jar:\u002Fusr\u002Flib\u002Floginsight\u002Fapplication\u002Flib\u002Fapache-cassandra-3.11.11\u002Fbin\u002F..\u002Flib\u002Fcassandra-driver-core-3.0.1-shaded.jar:\u002Fusr\u002Flib\u002Floginsight\u002Fapplication\u002Flib\u002Fapache-cassandra-3.11.11\u002Fbin\u002F..\u002Flib\u002Fcommons-cli-1.1.jar:\u002Fusr\u002Flib\u002Floginsight\u002Fapplication\u002Flib\u002Fapache-cassandra-3.11.11\u002Fbin\u002F..\u002Flib\u002Fcommons-codec-1.9.jar:\u002Fusr\u002Flib\u002Floginsight\u002Fapplication\u002Flib\u002Fapache-cassandra-3.11.11\u002Fbin\u002F..\u002Flib\u002Fcommons-lang3-3.1.jar:\u002Fusr\u002Flib\u002Floginsight\u002Fapplication\u002Flib\u002Fapache-cassandra-3.11.11\u002Fbin\u002F..\u002Flib\u002Fcommons-math3-3.2.jar:\u002Fusr\u002Flib\u002Floginsight\u002Fapplication\u002Flib\u002Fapache-cassandra-3.11.11\u002Fbin\u002F..\u002Flib\u002Fcompress-lzf-0.8.4.jar:\u002Fusr\u002Flib\u002Floginsight\u002Fapplication\u002Flib\u002Fapache-cassandra-3.11.11\u002Fbin\u002F..\u002Flib\u002Fconcurrentlinkedhashmap-lru-1.4.jar:\u002Fusr\u002Flib\u002Floginsight\u002Fapplication\u002Flib\u002Fapache-cassandra-3.11.11\u002Fbin\u002F..\u002Flib\u002Fconcurrent-trees-2.4.0.jar:\u002Fusr\u002Flib\u002Floginsight\u002Fapplication\u002Flib\u002Fapache-cassandra-3.11.11\u002Fbin\u002F..\u002Flib\u002Fdisruptor-3.0.1.jar:\u002Fusr\u002Flib\u002Floginsight\u002Fapplication\u002Flib\u002Fapache-cassandra-3.11.11\u002Fbin\u002F..\u002Flib\u002Fecj-4.4.2.jar:\u002Fusr\u002Flib\u002Floginsight\u002Fapplication\u002Flib\u002Fapache-cassandra-3.11.11\u002Fbin\u002F..\u002Flib\u002Fguava-18.0.jar:\u002Fusr\u002Flib\u002Floginsight\u002Fapplication\u002Flib\u002Fapache-cassandra-3.11.11\u002Fbin\u002F..\u002Flib\u002FHdrHistogram-2.1.9.jar:\u002Fusr\u002Flib\u002Floginsight\u002Fapplication\u002Flib\u002Fapache-cassandra-3.11.11\u002Fbin\u002F..\u002Flib\u002Fhigh-scale-lib-1.0.6.jar:\u002Fusr\u002Flib\u002Floginsight\u002Fapplication\u002Flib\u002Fapache-cassandra-3.11.11\u002Fbin\u002F..\u002Flib\u002Fhppc-0.5.4.jar:\u002Fusr\u002Flib\u002Floginsight\u002Fapplication\u002Flib\u002Fapache-cassandra-3.11.11\u002Fbin\u002F..\u002Flib\u002Fjackson-annotations-2.9.10.jar:\u002Fusr\u002Flib\u002Floginsight\u002Fapplication\u002Flib\u002Fapache-cassandra-3.11.11\u002Fbin\u002F..\u002Flib\u002Fjackson-core-2.9.10.jar:\u002Fusr\u002Flib\u002Floginsight\u002Fapplication\u002Flib\u002Fapache-cassandra-3.11.11\u002Fbin\u002F..\u002Flib\u002Fjackson-databind-2.9.10.8.jar:\u002Fusr\u002Flib\u002Floginsight\u002Fapplication\u002Flib\u002Fapache-cassandra-3.11.11\u002Fbin\u002F..\u002Flib\u002Fjamm-0.3.0.jar:\u002Fusr\u002Flib\u002Floginsight\u002Fapplication\u002Flib\u002Fapache-cassandra-3.11.11\u002Fbin\u002F..\u002Flib\u002Fjavax.inject-1.jar:\u002Fusr\u002Flib\u002Floginsight\u002Fapplication\u002Flib\u002Fapache-cassandra-3.11.11\u002Fbin\u002F..\u002Flib\u002Fjbcrypt-0.3m.jar:\u002Fusr\u002Flib\u002Floginsight\u002Fapplication\u002Flib\u002Fapache-cassandra-3.11.11\u002Fbin\u002F..\u002Flib\u002Fjcl-over-slf4j-1.7.7.jar:\u002Fusr\u002Flib\u002Floginsight\u002Fapplication\u002Flib\u002Fapache-cassandra-3.11.11\u002Fbin\u002F..\u002Flib\u002Fjctools-core-1.2.1.jar:\u002Fusr\u002Flib\u002Floginsight\u002Fapplication\u002Flib\u002Fapache-cassandra-3.11.11\u002Fbin\u002F..\u002Flib\u002Fjflex-1.6.0.jar:\u002Fusr\u002Flib\u002Floginsight\u002Fapplication\u002Flib\u002Fapache-cassandra-3.11.11\u002Fbin\u002F..\u002Flib\u002Fjna-4.2.2.jar:\u002Fusr\u002Flib\u002Floginsight\u002Fapplication\u002Flib\u002Fapache-cassandra-3.11.11\u002Fbin\u002F..\u002Flib\u002Fjoda-time-2.4.jar:\u002Fusr\u002Flib\u002Floginsight\u002Fapplication\u002Flib\u002Fapache-cassandra-3.11.11\u002Fbin\u002F..\u002Flib\u002Fjson-simple-1.1.jar:\u002Fusr\u002Flib\u002Floginsight\u002Fapplication\u002Flib\u002Fapache-cassandra-3.11.11\u002Fbin\u002F..\u002Flib\u002Flibthrift-0.9.2.jar:\u002Fusr\u002Flib\u002Floginsight\u002Fapplication\u002Flib\u002Fapache-cassandra-3.11.11\u002Fbin\u002F..\u002Flib\u002Flog4j-api-2.17.1.jar:\u002Fusr\u002Flib\u002Floginsight\u002Fapplication\u002Flib\u002Fapache-cassandra-3.11.11\u002Fbin\u002F..\u002Flib\u002Flog4j-core-2.17.1.jar:\u002Fusr\u002Flib\u002Floginsight\u002Fapplication\u002Flib\u002Fapache-cassandra-3.11.11\u002Fbin\u002F..\u002Flib\u002Flog4j-over-slf4j-1.7.7.jar:\u002Fusr\u002Flib\u002Floginsight\u002Fapplication\u002Flib\u002Fapache-cassandra-3.11.11\u002Fbin\u002F..\u002Flib\u002Flog4j-slf4j-impl-2.17.1.jar:\u002Fusr\u002Flib\u002Floginsight\u002Fapplication\u002Flib\u002Fapache-cassandra-3.11.11\u002Fbin\u002F..\u002Flib\u002Flogback-classic-1.1.3.jar:\u002Fusr\u002Flib\u002Floginsight\u002Fapplication\u002Flib\u002Fapache-cassandra-3.11.11\u002Fbin\u002F..\u002Flib\u002Flogback-core-1.1.3.jar:\u002Fusr\u002Flib\u002Floginsight\u002Fapplication\u002Flib\u002Fapache-cassandra-3.11.11\u002Fbin\u002F..\u002Flib\u002Flz4-1.3.0.jar:\u002Fusr\u002Flib\u002Floginsight\u002Fapplication\u002Flib\u002Fapache-cassandra-3.11.11\u002Fbin\u002F..\u002Flib\u002Fmetrics-core-3.1.5.jar:\u002Fusr\u002Flib\u002Floginsight\u002Fapplication\u002Flib\u002Fapache-cassandra-3.11.11\u002Fbin\u002F..\u002Flib\u002Fmetrics-jvm-3.1.5.jar:\u002Fusr\u002Flib\u002Floginsight\u002Fapplication\u002Flib\u002Fapache-cassandra-3.11.11\u002Fbin\u002F..\u002Flib\u002Fmetrics-logback-3.1.5.jar:\u002Fusr\u002Flib\u002Floginsight\u002Fapplication\u002Flib\u002Fapache-cassandra-3.11.11\u002Fbin\u002F..\u002Flib\u002Fnetty-all-4.0.44.Final.jar:\u002Fusr\u002Flib\u002Floginsight\u002Fapplication\u002Flib\u002Fapache-cassandra-3.11.11\u002Fbin\u002F..\u002Flib\u002Fohc-core-0.4.4.jar:\u002Fusr\u002Flib\u002Floginsight\u002Fapplication\u002Flib\u002Fapache-cassandra-3.11.11\u002Fbin\u002F..\u002Flib\u002Fohc-core-j8-0.4.4.jar:\u002Fusr\u002Flib\u002Floginsight\u002Fapplication\u002Flib\u002Fapache-cassandra-3.11.11\u002Fbin\u002F..\u002Flib\u002Freporter-config3-3.0.3.jar:\u002Fusr\u002Flib\u002Floginsight\u002Fapplication\u002Flib\u002Fapache-cassandra-3.11.11\u002Fbin\u002F..\u002Flib\u002Freporter-config-base-3.0.3.jar:\u002Fusr\u002Flib\u002Floginsight\u002Fapplication\u002Flib\u002Fapache-cassandra-3.11.11\u002Fbin\u002F..\u002Flib\u002Fsigar-1.6.4.jar:\u002Fusr\u002Flib\u002Floginsight\u002Fapplication\u002Flib\u002Fapache-cassandra-3.11.11\u002Fbin\u002F..\u002Flib\u002Fslf4j-api-1.7.30.jar:\u002Fusr\u002Flib\u002Floginsight\u002Fapplication\u002Flib\u002Fapache-cassandra-3.11.11\u002Fbin\u002F..\u002Flib\u002Fslf4j-api-1.7.7.jar:\u002Fusr\u002Flib\u002Floginsight\u002Fapplication\u002Flib\u002Fapache-cassandra-3.11.11\u002Fbin\u002F..\u002Flib\u002Fsnakeyaml-1.11.jar:\u002Fusr\u002Flib\u002Floginsight\u002Fapplication\u002Flib\u002Fapache-cassandra-3.11.11\u002Fbin\u002F..\u002Flib\u002Fsnappy-java-1.1.1.7.jar:\u002Fusr\u002Flib\u002Floginsight\u002Fapplication\u002Flib\u002Fapache-cassandra-3.11.11\u002Fbin\u002F..\u002Flib\u002Fsnowball-stemmer-1.3.0.581.1.jar:\u002Fusr\u002Flib\u002Floginsight\u002Fapplication\u002Flib\u002Fapache-cassandra-3.11.11\u002Fbin\u002F..\u002Flib\u002FST4-4.0.8.jar:\u002Fusr\u002Flib\u002Floginsight\u002Fapplication\u002Flib\u002Fapache-cassandra-3.11.11\u002Fbin\u002F..\u002Flib\u002Fstream-2.5.2.jar:\u002Fusr\u002Flib\u002Floginsight\u002Fapplication\u002Flib\u002Fapache-cassandra-3.11.11\u002Fbin\u002F..\u002Flib\u002Fthrift-server-0.3.7.jar:\u002Fusr\u002Flib\u002Floginsight\u002Fapplication\u002Flib\u002Fapache-cassandra-3.11.11\u002Fbin\u002F..\u002Flib\u002Fjsr223\u002F*\u002F*.jar: org.apache.cassandra.service.CassandraDaemon\u003C\u002Fp>\u003C\u002Ftd>\u003C\u002Ftr>\u003C\u002Ftbody>\u003C\u002Ftable>\u003Cp>Result analysis is as follows:\u003C\u002Fp>\u003Cp>\u003Cstrong>Process 1977:\u003C\u002Fstrong>\u003C\u002Fp>\u003Cp>Process parameters correspond to file: \u002Fusr\u002Flib\u002Floginsight\u002Fapplication\u002Fsbin\u002Floginsight-daemon.sh\u003C\u002Fp>\u003Cp>Corresponding lib folder: \u002Fusr\u002Flib\u002Floginsight\u002Fapplication\u002Flib\u002F\u003C\u002Fp>\u003Cp>\u003Cstrong>Process 2157:\u003C\u002Fstrong>\u003C\u002Fp>\u003Cp>Process parameters correspond to file: \u002Fusr\u002Flib\u002Floginsight\u002Fapplication\u002Fsbin\u002FvI18nManager\u003C\u002Fp>\u003Cp>Corresponding lib file: \u002Fusr\u002Flib\u002Floginsight\u002Fapplication\u002F3rd_party\u002FvI18nManager-logInsight-8.10.latest.jar\u003C\u002Fp>\u003Cp>\u003Cstrong>Process 2327:\u003C\u002Fstrong>\u003C\u002Fp>\u003Cp>Process parameter corresponding file: \u002Fusr\u002Flib\u002Floginsight\u002Fapplication\u002F3rd_party\u002Fapache-tomcat-8.5.82\u002Fbin\u002Fcatalina.sh\u003C\u002Fp>\u003Cp>Corresponding lib folder: \u002Fusr\u002Flib\u002Floginsight\u002Fapplication\u002F3rd_party\u002Fapache-tomcat-8.5.82\u002F\u003C\u002Fp>\u003Cp>\u003Cstrong>Process 3097:\u003C\u002Fstrong>\u003C\u002Fp>\u003Cp>Process parameter corresponding file: \u002Fusr\u002Flib\u002Floginsight\u002Fapplication\u002Flib\u002Fapache-cassandra-3.11.11\u002Fconf\u002Fjvm.options\u003C\u002Fp>\u003Cp>Corresponding lib folder: \u002Fusr\u002Flib\u002Floginsight\u002Fapplication\u002Flib\u002Fapache-cassandra-3.11.11\u002Flib\u002F\u003C\u002Fp>\u003Cp>Method to add debug parameters to process 3097:\u003C\u002Fp>\u003Cp>Modify file \u002Fusr\u002Flib\u002Floginsight\u002Fapplication\u002Flib\u002Fapache-cassandra-3.11.11\u002Fconf\u002Fjvm.options\u003C\u002Fp>\u003Cp>Add content: -agentlib:jdwp=transport=dt_socket,server=y,suspend=n,address=1414\u003C\u002Fp>\u003Cp>Restart service: service loginsight restart\u003C\u002Fp>\u003Cp>Add firewall rule: iptables -I INPUT -p tcp --dport 1414 -j ACCEPT\u003C\u002Fp>\u003Ch2>0x03 Database Operations\u003C\u002Fh2>\u003Cp>---\u003C\u002Fp>\u003Ch3>1. Reset web login user admin password\u003C\u002Fh3>\u003Cp>Implementation file: \u002Fusr\u002Flib\u002Floginsight\u002Fapplication\u002Fsbin\u002Fli-reset-admin-passwd.sh\u003C\u002Fp>\u003Cp>Database operation-related information can be obtained from the file, as shown in the figure below\u003C\u002Fp>\u003Cp>\u003Cimg alt=\"Alt text\" src=\"\u002Fuploads\u002Fdocx_image_1770015147703_2_4bb28201b3.png\">\u003C\u002Fp>\u003Ch3>2. Command parameters for connecting to the database\u003C\u002Fh3>\u003Cp>Implementation file: \u002Fusr\u002Flib\u002Floginsight\u002Fapplication\u002Flib\u002Fapache-cassandra-3.11.11\u002Fbin\u002Fcqlsh-no-pass\u003C\u002Fp>\u003Cp>The file content is as follows:\u003C\u002Fp>\u003Ctable>\u003Ctbody>\u003Ctr>\u003Ctd>\u003Cp>_bin() {\u003Cbr>    local CASSANDRA_BIN=$(find $BASE -name nodetool | sort | tail -n 1)\u003Cbr>    if [ ! -e \"$CASSANDRA_BIN\" ]; then\u003Cbr>        echo \"ERROR: Unable to locate Cassandra's bin directory!\"\u003Cbr>        exit 255\u003Cbr>    else\u003Cbr>        # Echo the bin directory\u003Cbr>        echo ${CASSANDRA_BIN%\u002F*}\u003Cbr>    fi\u003Cbr>    return 0\u003Cbr>}\u003Cbr>\u003Cbr>BASE=\"$(dirname $(readlink -f $0 2>\u002Fdev\u002Fnull) 2>\u002Fdev\u002Fnull)\u002F\"\u003Cbr>if [ $? != 0  ]; then\u003Cbr>    # If mac then no need to worry about symlink\u003Cbr>    BASE=\"$(dirname $0)\"\u003Cbr>    BASE=\"${BASE%.*}\"\u003Cbr>    if [ ! -z \"$BASE\" ]; then\u003Cbr>        BASE=\"$BASE\u002F\";\u003Cbr>    fi\u003Cbr>elif [ \"$BASE\" == \"\u002Fopt\u002Fvmware\u002Fbin\u002F\" ]; then\u003Cbr>    BASE=\"\u002Fusr\u002Flib\u002Floginsight\u002Fapplication\u002Flib\u002Fapache-cassandra-*\"\u003Cbr>fi\u003Cbr>\u003Cbr>CASSANDRA_BIN=$(_bin)\u003Cbr>if [ $? != 0 ]; then\u003Cbr>    echo $CASSANDRA_BIN\u003Cbr>    exit 255\u003Cbr>fi\u003Cbr>\u003Cbr>user_password=`$CASSANDRA_BIN\u002Fcredentials-look-up | tr \"\\n\" \" \" | sed 's\u002F.*\"\\(.*\\)\".*\"\\(.*\\)\".*\u002F\\1\\t\\2\u002Fg'`\u003Cbr>cuser=`echo \"${user_password}\" | cut -f1`\u003Cbr>cpassword=`echo \"${user_password}\" | cut -f2`\u003Cbr>\u003Cbr>$CASSANDRA_BIN\u002Fcqlsh -u $cuser -p $cpassword --cqlshrc=\u002Fstorage\u002Fcore\u002Floginsight\u002Fcidata\u002Fcassandra\u002Fconfig\u002Fcqlshrc \"$@\"r\u003C\u002Fp>\u003C\u002Ftd>\u003C\u002Ftr>\u003C\u002Ftbody>\u003C\u002Ftable>\u003Cp>Specific parameters for database operations can be obtained from the file:\u003C\u002Fp>\u003Cul>\u003Cli>Obtain username and password from $CASSANDRA_BIN\u002Fcredentials-look-up\u003C\u002Fli>\u003Cli>Configuration file is \u002Fstorage\u002Fcore\u002Floginsight\u002Fcidata\u002Fcassandra\u002Fconfig\u002Fcqlshrc\u003C\u002Fli>\u003C\u002Ful>\u003Ch3>3. Username and password for database connection\u003C\u002Fh3>\u003Cp>Implementation file: \u002Fusr\u002Flib\u002Floginsight\u002Fapplication\u002Flib\u002Fapache-cassandra-3.11.11\u002Fbin\u002Fcredentials-look-up\u003C\u002Fp>\u003Cp>Returns username and password after execution:\u003C\u002Fp>\u003Ctable>\u003Ctbody>\u003Ctr>\u003Ctd>\u003Cp>\u003Ccassandra-user value=\"lisuper\">\u003Cbr>\u003Ccassandra-password value=\"slshitn2@S\">\u003C\u002Fcassandra-password>\u003C\u002Fcassandra-user>\u003C\u002Fp>\u003C\u002Ftd>\u003C\u002Ftr>\u003C\u002Ftbody>\u003C\u002Ftable>\u003Cp>The implementation principle involves reading the file \u002Fstorage\u002Fcore\u002Floginsight\u002Fconfig\u002Floginsight-config.xml* and extracting plaintext username and password credentials from the XML file\u003C\u002Fp>\u003Ch3>4. Database connection configuration information\u003C\u002Fh3>\u003Cp>Implementation file: \u002Fstorage\u002Fcore\u002Floginsight\u002Fcidata\u002Fcassandra\u002Fconfig\u002Fcqlshrc\u003C\u002Fp>\u003Cp>File contents are as follows:\u003C\u002Fp>\u003Ctable>\u003Ctbody>\u003Ctr>\u003Ctd>\u003Cp>[connection]\u003Cbr>hostname = 127.0.0.1\u003Cbr>port = 9042\u003Cbr>client_timeout = 120\u003Cbr>ssl = true\u003Cbr>\u003Cbr>;[authentication]\u003Cbr>;username = cassandra\u003Cbr>;password = cassandra\u003Cbr>\u003Cbr>[ssl]\u003Cbr>certfile = \u002Fstorage\u002Fcore\u002Floginsight\u002Fcidata\u002Fcassandra\u002Fconfig\u002Fcacert.pem\u003Cbr>;usercert = cert.pem\u003Cbr>;userkey = cert_key.pem\u003C\u002Fp>\u003C\u002Ftd>\u003C\u002Ftr>\u003C\u002Ftbody>\u003C\u002Ftable>\u003Cp>Based on the above content, two methods for connecting to the database can be summarized:\u003C\u002Fp>\u003Ch4>(1) Using a file with pre-packaged parameters\u003C\u002Fh4>\u003Ctable>\u003Ctbody>\u003Ctr>\u003Ctd>\u003Cp>\u002Fusr\u002Flib\u002Floginsight\u002Fapplication\u002Flib\u002Fapache-cassandra-3.11.11\u002Fbin\u002Fcqlsh-no-pass\u003C\u002Fp>\u003C\u002Ftd>\u003C\u002Ftr>\u003C\u002Ftbody>\u003C\u002Ftable>\u003Ch4>(2) Connecting using parameters\u003C\u002Fh4>\u003Ctable>\u003Ctbody>\u003Ctr>\u003Ctd>\u003Cp>\u002Fusr\u002Flib\u002Floginsight\u002Fapplication\u002Flib\u002Fapache-cassandra-3.11.11\u002Fbin\u002Fcqlsh -u lisuper -p slshitn2@S --cqlshrc=\u002Fstorage\u002Fcore\u002Floginsight\u002Fcidata\u002Fcassandra\u002Fconfig\u002Fcqlshrc\u003C\u002Fp>\u003C\u002Ftd>\u003C\u002Ftr>\u003C\u002Ftbody>\u003C\u002Ftable>\u003Cp>From the returned results, it can be seen that the database uses CQL (Cassandra Query Language)\u003C\u002Fp>\u003Cp>Commands for querying user configuration:\u003C\u002Fp>\u003Ctable>\u003Ctbody>\u003Ctr>\u003Ctd>\u003Cp>select * from logdb.user;\u003Cbr>select * from logdb.user_auth;\u003C\u002Fp>\u003C\u002Ftd>\u003C\u002Ftr>\u003C\u002Ftbody>\u003C\u002Ftable>\u003Ch3>5. Graphical interface for database operations\u003C\u002Fh3>\u003Cp>Here, the software TablePlus is used\u003C\u002Fp>\u003Cp>Firewall configuration needs to be modified to open port 9042: iptables -I INPUT -p tcp --dport 9042 -j ACCEPT\u003C\u002Fp>\u003Cp>Certificate file to use: \u002Fstorage\u002Fcore\u002Floginsight\u002Fcidata\u002Fcassandra\u002Fconfig\u002Fcacert.pem\u003C\u002Fp>\u003Cp>Successful connection is shown in the figure below\u003C\u002Fp>\u003Cp>\u003Cimg alt=\"Alt text\" src=\"\u002Fuploads\u002Fdocx_image_1770015151129_3_e89e82a920.png\">\u003C\u002Fp>\u003Ch2>0x04 Summary\u003C\u002Fh2>\u003Cp>---\u003C\u002Fp>\u003Cp>After setting up the vRealize Log Insight vulnerability debugging environment, we can proceed to study the vulnerability.\u003C\u002Fp>\u003C\u002Fbody>\u003C\u002Fhtml>","text","ltr","\u003Chtml>\u003Chead>\u003C\u002Fhead>\u003Cbody>\u003Ch2>0x00 Preface\u003C\u002Fh2>\u003Cp>---\u003C\u002Fp>\u003Cp>This article documents the details of building a vRealize Log Insight vulnerability debugging environment from scratch.\u003C\u002Fp>\u003Ch2>0x01 Introduction\u003C\u002Fh2>\u003Cp>---\u003C\u002Fp>\u003Cp>This article will cover the following topics:\u003C\u002Fp>\u003Cul>\u003Cli>vRealize Log Insight Installation\u003C\u002Fli>\u003Cli>vRealize Log Insight Vulnerability Debugging Environment Configuration\u003C\u002Fli>\u003Cli>Database Operations\u003C\u002Fli>\u003C\u002Ful>\u003Ch2>0x02 vRealize Log Insight Installation\u003C\u002Fh2>\u003Cp>---\u003C\u002Fp>\u003Cp>Reference: https:\u002F\u002Fdocs.vmware.com\u002Fen\u002FvRealize-Log-Insight\u002Findex.html\u003C\u002Fp>\u003Ch3>1. Download OVA File\u003C\u002Fh3>\u003Cp>Download page: https:\u002F\u002Fcustomerconnect.vmware.com\u002Fevalcenter?p=vr-li\u003C\u002Fp>\u003Cp>Download requires user registration first, then select the desired version for download\u003C\u002Fp>\u003Ch3>2. Installation\u003C\u002Fh3>\u003Ch4>(1) Import the OVA file in VMware Workstation\u003C\u002Fh4>\u003Ch4>(2) Configuration\u003C\u002Fh4>\u003Cp>Access the configuration page at https:\u002F\u002F\u003Cip>\u002F\u003C\u002Fip>\u003C\u002Fp>\u003Cp>Select Starting New Deployment, set the admin user password\u003C\u002Fp>\u003Ch3>3. Enable remote debugging function\u003C\u002Fh3>\u003Ch4>(1) Check the status of all services\u003C\u002Fh4>\u003Ctable>\u003Ctbody>\u003Ctr>\u003Ctd>\u003Cp>systemctl status\u003C\u002Fp>\u003C\u002Ftd>\u003C\u002Ftr>\u003C\u002Ftbody>\u003C\u002Ftable>\u003Cp>Result as shown in the figure below\u003C\u002Fp>\u003Cp>\u003Cimg alt=\"Alt text\" src=\"\u002Fapi\u002Fmedia\u002Ffile\u002Fdocx_image_1770015140353_0_e527896f22-1.png\">\u003C\u002Fp>\u003Cp>Locate the web-related service as loginsight.service\u003C\u002Fp>\u003Ch4>(2) View detailed information of loginsight.service\u003C\u002Fh4>\u003Ctable>\u003Ctbody>\u003Ctr>\u003Ctd>\u003Cp>systemctl status loginsight.service\u003C\u002Fp>\u003C\u002Ftd>\u003C\u002Ftr>\u003C\u002Ftbody>\u003C\u002Ftable>\u003Cp>Result as shown in the figure below\u003C\u002Fp>\u003Cp>\u003Cimg alt=\"Alt text\" src=\"\u002Fapi\u002Fmedia\u002Ffile\u002Fdocx_image_1770015144679_1_7bbd11b7af-1.png\">\u003C\u002Fp>\u003Cp>Locate the service startup file: \u002Fusr\u002Flib\u002Floginsight\u002Fapplication\u002Fbin\u002Floginsight\u003C\u002Fp>\u003Ch4>(3) View process parameters\u003C\u002Fh4>\u003Cp>Execute command: ps aux|grep java\u003C\u002Fp>\u003Cp>Return result:\u003C\u002Fp>\u003Ctable>\u003Ctbody>\u003Ctr>\u003Ctd>\u003Cp>root      1977  4.7 34.5 4687676 1396852 ?     Sl   00:04   6:55 \u002Fusr\u002Flib\u002Floginsight\u002Fapplication\u002F3rd_party\u002Fbin\u002Fjava -Xrs -XX:+HeapDumpOnOutOfMemoryError -XX:HeapDumpPath=\u002Fstorage\u002Fcore\u002Floginsight\u002Fvar\u002Fheapdump\u002Fli_heapdump.hprof -XX:ErrorFile=\u002Fstorage\u002Fcore\u002Floginsight\u002Fvar\u002Fjvm_hs_err_pid.log -Djava.util.logging.config.level=SEVERE -Djdk.tls.ephemeralDHKeySize=2048 -Dorg.bouncycastle.fips.approved_only=false -Djavax.net.ssl.trustStorePassword=changeit -Djdk.http.auth.tunneling.disabledSchemes=\"\" -DLOGINSIGHT_HOME=\u002Fusr\u002Flib\u002Floginsight -Dstrata.pgid=1961 -cp \u002Fusr\u002Flib\u002Floginsight\u002Fapplication\u002Flib\u002F* -Xmx1972m -Xms1972m -Xss256k -Xmn1024M -XX:+UseConcMarkSweepGC -XX:+UseParNewGC -XX:CMSInitiatingOccupancyFraction=75 -XX:+UseCMSInitiatingOccupancyOnly -XX:+ScavengeBeforeFullGC -XX:TargetSurvivorRatio=80 -XX:SurvivorRatio=8 -XX:MaxTenuringThreshold=15 -XX:ParallelGCThreads=4 -XX:+UseCompressedOops -XX:+OptimizeStringConcat -XX:+AlwaysPreTouch com.vmware.loginsight.daemon.LogInsightDaemon --wait=120\u003Cbr>root      2157  0.1  2.0 2685308 84276 ?       Sl   00:04   0:17 \u002Fusr\u002Flib\u002Floginsight\u002Fapplication\u002F3rd_party\u002Fbin\u002Fjava -Xms100m -Xmx256m -jar -Dapp.log.home=\u002Fstorage\u002Fvar\u002Floginsight \u002Fusr\u002Flib\u002Floginsight\u002Fapplication\u002F3rd_party\u002FvI18nManager-logInsight-8.10.latest.jar --server.scheme=https -c --swagger-ui.enable=false\u003Cbr>root      2327  0.6 15.1 3577064 612048 ?      Sl   00:04   0:57 \u002Fusr\u002Flib\u002Floginsight\u002Fapplication\u002F3rd_party\u002Fbin\u002Fjava -Dnop -Djava.util.logging.manager=org.apache.juli.ClassLoaderLogManager -server -DLOGINSIGHT_HOME=\u002Fusr\u002Flib\u002Floginsight -Dorg.bouncycastle.fips.approved_only=false -Dorg.apache.jasper.runtime.BodyContentImpl.LIMIT_BUFFER=true -Djava.awt.headless=true -Dorg.apache.jasper.runtime.JspFactoryImpl.USE_POOL=false -Djdk.tls.rejectClientInitiatedRenegotiation=true -Dorg.apache.el.parser.SKIP_IDENTIFIER_CHECK=true -Djavax.net.ssl.trustStorePassword=changeit -Djava.endorsed.dirs= -classpath \u002Fusr\u002Flib\u002Floginsight\u002Fapplication\u002F3rd_party\u002Fapache-tomcat-8.5.82\u002Flog4j2\u002Flib\u002F*:\u002Fusr\u002Flib\u002Floginsight\u002Fapplication\u002F3rd_party\u002Fapache-tomcat-8.5.82\u002Flog4j2\u002Fconf:\u002Fusr\u002Flib\u002Floginsight\u002Fapplication\u002F3rd_party\u002Fapache-tomcat-8.5.82\u002Fbin\u002Fbootstrap.jar:\u002Fusr\u002Flib\u002Floginsight\u002Fapplication\u002F3rd_party\u002Fapache-tomcat-8.5.82\u002Fbin\u002Ftomcat-juli.jar -Dcatalina.base=\u002Fusr\u002Flib\u002Floginsight\u002Fapplication\u002F3rd_party\u002Fapache-tomcat-8.5.82 -Dcatalina.home=\u002Fusr\u002Flib\u002Floginsight\u002Fapplication\u002F3rd_party\u002Fapache-tomcat-8.5.82 -Djava.io.tmpdir=\u002Fusr\u002Flib\u002Floginsight\u002Fapplication\u002F3rd_party\u002Fapache-tomcat-8.5.82\u002Ftemp org.apache.catalina.startup.Bootstrap start\u003Cbr>root      3097  1.7 33.0 2860656 1336624 ?     SLl  00:06   2:31 \u002Fusr\u002Fbin\u002Fjava -Xloggc:\u002Fusr\u002Flib\u002Floginsight\u002Fapplication\u002Flib\u002Fapache-cassandra-3.11.11\u002Fbin\u002F..\u002Flogs\u002Fgc.log -ea -XX:+UseThreadPriorities -XX:ThreadPriorityPolicy=42 -XX:+HeapDumpOnOutOfMemoryError -Xss256k -XX:StringTableSize=1000003 -XX:+AlwaysPreTouch -XX:-UseBiasedLocking -XX:+UseTLAB -XX:+ResizeTLAB -XX:+UseNUMA -XX:+PerfDisableSharedMem -Djava.net.preferIPv4Stack=true -XX:+UseParNewGC -XX:+UseConcMarkSweepGC -XX:+CMSParallelRemarkEnabled -XX:SurvivorRatio=8 -XX:MaxTenuringThreshold=1 -XX:CMSInitiatingOccupancyFraction=75 -XX:+UseCMSInitiatingOccupancyOnly -XX:CMSWaitDuration=10000 -XX:+CMSParallelInitialMarkEnabled -XX:+CMSEdenChunksRecordAlways -XX:+CMSClassUnloadingEnabled -XX:+PrintGCDetails -XX:+PrintGCDateStamps -XX:+PrintHeapAtGC -XX:+PrintTenuringDistribution -XX:+PrintGCApplicationStoppedTime -XX:+PrintPromotionFailure -XX:+UseGCLogFileRotation -XX:NumberOfGCLogFiles=10 -XX:GCLogFileSize=10M -Xms1024M -Xmx1024M -Xmn200M -XX:+UseCondCardMark -XX:CompileCommandFile=\u002Fstorage\u002Fcore\u002Floginsight\u002Fcidata\u002Fcassandra\u002Fconfig\u002Fhotspot_compiler -javaagent:\u002Fusr\u002Flib\u002Floginsight\u002Fapplication\u002Flib\u002Fapache-cassandra-3.11.11\u002Fbin\u002F..\u002Flib\u002Fjamm-0.3.0.jar -Djava.rmi.server.hostname=192.168.112.156 -Dcassandra.jmx.local.port=7199 -Dcom.sun.management.jmxremote.authenticate=true -Dcom.sun.management.jmxremote.password.file=\u002Fstorage\u002Fcore\u002Floginsight\u002Fcidata\u002Fcassandra\u002Fconfig\u002Fjmxremote.password -Djava.library.path=\u002Fusr\u002Flib\u002Floginsight\u002Fapplication\u002Flib\u002Fapache-cassandra-3.11.11\u002Fbin\u002F..\u002Flib\u002Fsigar-bin -Dcassandra.consistent.rangemovement=false -XX:OnOutOfMemoryError=kill -9 %p -Dlogback.configurationFile=logback.xml -Dcassandra.logdir=\u002Fusr\u002Flib\u002Floginsight\u002Fapplication\u002Flib\u002Fapache-cassandra-3.11.11\u002Fbin\u002F..\u002Flogs -Dcassandra.storagedir=\u002Fusr\u002Flib\u002Floginsight\u002Fapplication\u002Flib\u002Fapache-cassandra-3.11.11\u002Fbin\u002F..\u002Fdata -Dcassandra-foreground=yes -cp \u002Fstorage\u002Fcore\u002Floginsight\u002Fcidata\u002Fcassandra\u002Fconfig:\u002Fusr\u002Flib\u002Floginsight\u002Fapplication\u002Flib\u002Fapache-cassandra-3.11.11\u002Fbin\u002F..\u002Fbuild\u002Fclasses\u002Fmain:\u002Fusr\u002Flib\u002Floginsight\u002Fapplication\u002Flib\u002Fapache-cassandra-3.11.11\u002Fbin\u002F..\u002Fbuild\u002Fclasses\u002Fthrift:\u002Fusr\u002Flib\u002Floginsight\u002Fapplication\u002Flib\u002Fapache-cassandra-3.11.11\u002Fbin\u002F..\u002Flib\u002Fairline-0.6.jar:\u002Fusr\u002Flib\u002Floginsight\u002Fapplication\u002Flib\u002Fapache-cassandra-3.11.11\u002Fbin\u002F..\u002Flib\u002Fantlr-runtime-3.5.2.jar:\u002Fusr\u002Flib\u002Floginsight\u002Fapplication\u002Flib\u002Fapache-cassandra-3.11.11\u002Fbin\u002F..\u002Flib\u002Fapache-cassandra-3.11.11.jar:\u002Fusr\u002Flib\u002Floginsight\u002Fapplication\u002Flib\u002Fapache-cassandra-3.11.11\u002Fbin\u002F..\u002Flib\u002Fapache-cassandra-thrift-3.11.11.jar:\u002Fusr\u002Flib\u002Floginsight\u002Fapplication\u002Flib\u002Fapache-cassandra-3.11.11\u002Fbin\u002F..\u002Flib\u002Fasm-5.0.4.jar:\u002Fusr\u002Flib\u002Floginsight\u002Fapplication\u002Flib\u002Fapache-cassandra-3.11.11\u002Fbin\u002F..\u002Flib\u002Fcaffeine-2.2.6.jar:\u002Fusr\u002Flib\u002Floginsight\u002Fapplication\u002Flib\u002Fapache-cassandra-3.11.11\u002Fbin\u002F..\u002Flib\u002Fcassandra-driver-core-3.0.1-shaded.jar:\u002Fusr\u002Flib\u002Floginsight\u002Fapplication\u002Flib\u002Fapache-cassandra-3.11.11\u002Fbin\u002F..\u002Flib\u002Fcommons-cli-1.1.jar:\u002Fusr\u002Flib\u002Floginsight\u002Fapplication\u002Flib\u002Fapache-cassandra-3.11.11\u002Fbin\u002F..\u002Flib\u002Fcommons-codec-1.9.jar:\u002Fusr\u002Flib\u002Floginsight\u002Fapplication\u002Flib\u002Fapache-cassandra-3.11.11\u002Fbin\u002F..\u002Flib\u002Fcommons-lang3-3.1.jar:\u002Fusr\u002Flib\u002Floginsight\u002Fapplication\u002Flib\u002Fapache-cassandra-3.11.11\u002Fbin\u002F..\u002Flib\u002Fcommons-math3-3.2.jar:\u002Fusr\u002Flib\u002Floginsight\u002Fapplication\u002Flib\u002Fapache-cassandra-3.11.11\u002Fbin\u002F..\u002Flib\u002Fcompress-lzf-0.8.4.jar:\u002Fusr\u002Flib\u002Floginsight\u002Fapplication\u002Flib\u002Fapache-cassandra-3.11.11\u002Fbin\u002F..\u002Flib\u002Fconcurrentlinkedhashmap-lru-1.4.jar:\u002Fusr\u002Flib\u002Floginsight\u002Fapplication\u002Flib\u002Fapache-cassandra-3.11.11\u002Fbin\u002F..\u002Flib\u002Fconcurrent-trees-2.4.0.jar:\u002Fusr\u002Flib\u002Floginsight\u002Fapplication\u002Flib\u002Fapache-cassandra-3.11.11\u002Fbin\u002F..\u002Flib\u002Fdisruptor-3.0.1.jar:\u002Fusr\u002Flib\u002Floginsight\u002Fapplication\u002Flib\u002Fapache-cassandra-3.11.11\u002Fbin\u002F..\u002Flib\u002Fecj-4.4.2.jar:\u002Fusr\u002Flib\u002Floginsight\u002Fapplication\u002Flib\u002Fapache-cassandra-3.11.11\u002Fbin\u002F..\u002Flib\u002Fguava-18.0.jar:\u002Fusr\u002Flib\u002Floginsight\u002Fapplication\u002Flib\u002Fapache-cassandra-3.11.11\u002Fbin\u002F..\u002Flib\u002FHdrHistogram-2.1.9.jar:\u002Fusr\u002Flib\u002Floginsight\u002Fapplication\u002Flib\u002Fapache-cassandra-3.11.11\u002Fbin\u002F..\u002Flib\u002Fhigh-scale-lib-1.0.6.jar:\u002Fusr\u002Flib\u002Floginsight\u002Fapplication\u002Flib\u002Fapache-cassandra-3.11.11\u002Fbin\u002F..\u002Flib\u002Fhppc-0.5.4.jar:\u002Fusr\u002Flib\u002Floginsight\u002Fapplication\u002Flib\u002Fapache-cassandra-3.11.11\u002Fbin\u002F..\u002Flib\u002Fjackson-annotations-2.9.10.jar:\u002Fusr\u002Flib\u002Floginsight\u002Fapplication\u002Flib\u002Fapache-cassandra-3.11.11\u002Fbin\u002F..\u002Flib\u002Fjackson-core-2.9.10.jar:\u002Fusr\u002Flib\u002Floginsight\u002Fapplication\u002Flib\u002Fapache-cassandra-3.11.11\u002Fbin\u002F..\u002Flib\u002Fjackson-databind-2.9.10.8.jar:\u002Fusr\u002Flib\u002Floginsight\u002Fapplication\u002Flib\u002Fapache-cassandra-3.11.11\u002Fbin\u002F..\u002Flib\u002Fjamm-0.3.0.jar:\u002Fusr\u002Flib\u002Floginsight\u002Fapplication\u002Flib\u002Fapache-cassandra-3.11.11\u002Fbin\u002F..\u002Flib\u002Fjavax.inject-1.jar:\u002Fusr\u002Flib\u002Floginsight\u002Fapplication\u002Flib\u002Fapache-cassandra-3.11.11\u002Fbin\u002F..\u002Flib\u002Fjbcrypt-0.3m.jar:\u002Fusr\u002Flib\u002Floginsight\u002Fapplication\u002Flib\u002Fapache-cassandra-3.11.11\u002Fbin\u002F..\u002Flib\u002Fjcl-over-slf4j-1.7.7.jar:\u002Fusr\u002Flib\u002Floginsight\u002Fapplication\u002Flib\u002Fapache-cassandra-3.11.11\u002Fbin\u002F..\u002Flib\u002Fjctools-core-1.2.1.jar:\u002Fusr\u002Flib\u002Floginsight\u002Fapplication\u002Flib\u002Fapache-cassandra-3.11.11\u002Fbin\u002F..\u002Flib\u002Fjflex-1.6.0.jar:\u002Fusr\u002Flib\u002Floginsight\u002Fapplication\u002Flib\u002Fapache-cassandra-3.11.11\u002Fbin\u002F..\u002Flib\u002Fjna-4.2.2.jar:\u002Fusr\u002Flib\u002Floginsight\u002Fapplication\u002Flib\u002Fapache-cassandra-3.11.11\u002Fbin\u002F..\u002Flib\u002Fjoda-time-2.4.jar:\u002Fusr\u002Flib\u002Floginsight\u002Fapplication\u002Flib\u002Fapache-cassandra-3.11.11\u002Fbin\u002F..\u002Flib\u002Fjson-simple-1.1.jar:\u002Fusr\u002Flib\u002Floginsight\u002Fapplication\u002Flib\u002Fapache-cassandra-3.11.11\u002Fbin\u002F..\u002Flib\u002Flibthrift-0.9.2.jar:\u002Fusr\u002Flib\u002Floginsight\u002Fapplication\u002Flib\u002Fapache-cassandra-3.11.11\u002Fbin\u002F..\u002Flib\u002Flog4j-api-2.17.1.jar:\u002Fusr\u002Flib\u002Floginsight\u002Fapplication\u002Flib\u002Fapache-cassandra-3.11.11\u002Fbin\u002F..\u002Flib\u002Flog4j-core-2.17.1.jar:\u002Fusr\u002Flib\u002Floginsight\u002Fapplication\u002Flib\u002Fapache-cassandra-3.11.11\u002Fbin\u002F..\u002Flib\u002Flog4j-over-slf4j-1.7.7.jar:\u002Fusr\u002Flib\u002Floginsight\u002Fapplication\u002Flib\u002Fapache-cassandra-3.11.11\u002Fbin\u002F..\u002Flib\u002Flog4j-slf4j-impl-2.17.1.jar:\u002Fusr\u002Flib\u002Floginsight\u002Fapplication\u002Flib\u002Fapache-cassandra-3.11.11\u002Fbin\u002F..\u002Flib\u002Flogback-classic-1.1.3.jar:\u002Fusr\u002Flib\u002Floginsight\u002Fapplication\u002Flib\u002Fapache-cassandra-3.11.11\u002Fbin\u002F..\u002Flib\u002Flogback-core-1.1.3.jar:\u002Fusr\u002Flib\u002Floginsight\u002Fapplication\u002Flib\u002Fapache-cassandra-3.11.11\u002Fbin\u002F..\u002Flib\u002Flz4-1.3.0.jar:\u002Fusr\u002Flib\u002Floginsight\u002Fapplication\u002Flib\u002Fapache-cassandra-3.11.11\u002Fbin\u002F..\u002Flib\u002Fmetrics-core-3.1.5.jar:\u002Fusr\u002Flib\u002Floginsight\u002Fapplication\u002Flib\u002Fapache-cassandra-3.11.11\u002Fbin\u002F..\u002Flib\u002Fmetrics-jvm-3.1.5.jar:\u002Fusr\u002Flib\u002Floginsight\u002Fapplication\u002Flib\u002Fapache-cassandra-3.11.11\u002Fbin\u002F..\u002Flib\u002Fmetrics-logback-3.1.5.jar:\u002Fusr\u002Flib\u002Floginsight\u002Fapplication\u002Flib\u002Fapache-cassandra-3.11.11\u002Fbin\u002F..\u002Flib\u002Fnetty-all-4.0.44.Final.jar:\u002Fusr\u002Flib\u002Floginsight\u002Fapplication\u002Flib\u002Fapache-cassandra-3.11.11\u002Fbin\u002F..\u002Flib\u002Fohc-core-0.4.4.jar:\u002Fusr\u002Flib\u002Floginsight\u002Fapplication\u002Flib\u002Fapache-cassandra-3.11.11\u002Fbin\u002F..\u002Flib\u002Fohc-core-j8-0.4.4.jar:\u002Fusr\u002Flib\u002Floginsight\u002Fapplication\u002Flib\u002Fapache-cassandra-3.11.11\u002Fbin\u002F..\u002Flib\u002Freporter-config3-3.0.3.jar:\u002Fusr\u002Flib\u002Floginsight\u002Fapplication\u002Flib\u002Fapache-cassandra-3.11.11\u002Fbin\u002F..\u002Flib\u002Freporter-config-base-3.0.3.jar:\u002Fusr\u002Flib\u002Floginsight\u002Fapplication\u002Flib\u002Fapache-cassandra-3.11.11\u002Fbin\u002F..\u002Flib\u002Fsigar-1.6.4.jar:\u002Fusr\u002Flib\u002Floginsight\u002Fapplication\u002Flib\u002Fapache-cassandra-3.11.11\u002Fbin\u002F..\u002Flib\u002Fslf4j-api-1.7.30.jar:\u002Fusr\u002Flib\u002Floginsight\u002Fapplication\u002Flib\u002Fapache-cassandra-3.11.11\u002Fbin\u002F..\u002Flib\u002Fslf4j-api-1.7.7.jar:\u002Fusr\u002Flib\u002Floginsight\u002Fapplication\u002Flib\u002Fapache-cassandra-3.11.11\u002Fbin\u002F..\u002Flib\u002Fsnakeyaml-1.11.jar:\u002Fusr\u002Flib\u002Floginsight\u002Fapplication\u002Flib\u002Fapache-cassandra-3.11.11\u002Fbin\u002F..\u002Flib\u002Fsnappy-java-1.1.1.7.jar:\u002Fusr\u002Flib\u002Floginsight\u002Fapplication\u002Flib\u002Fapache-cassandra-3.11.11\u002Fbin\u002F..\u002Flib\u002Fsnowball-stemmer-1.3.0.581.1.jar:\u002Fusr\u002Flib\u002Floginsight\u002Fapplication\u002Flib\u002Fapache-cassandra-3.11.11\u002Fbin\u002F..\u002Flib\u002FST4-4.0.8.jar:\u002Fusr\u002Flib\u002Floginsight\u002Fapplication\u002Flib\u002Fapache-cassandra-3.11.11\u002Fbin\u002F..\u002Flib\u002Fstream-2.5.2.jar:\u002Fusr\u002Flib\u002Floginsight\u002Fapplication\u002Flib\u002Fapache-cassandra-3.11.11\u002Fbin\u002F..\u002Flib\u002Fthrift-server-0.3.7.jar:\u002Fusr\u002Flib\u002Floginsight\u002Fapplication\u002Flib\u002Fapache-cassandra-3.11.11\u002Fbin\u002F..\u002Flib\u002Fjsr223\u002F*\u002F*.jar: org.apache.cassandra.service.CassandraDaemon\u003C\u002Fp>\u003C\u002Ftd>\u003C\u002Ftr>\u003C\u002Ftbody>\u003C\u002Ftable>\u003Cp>Result analysis is as follows:\u003C\u002Fp>\u003Cp>\u003Cstrong>Process 1977:\u003C\u002Fstrong>\u003C\u002Fp>\u003Cp>Process parameters correspond to file: \u002Fusr\u002Flib\u002Floginsight\u002Fapplication\u002Fsbin\u002Floginsight-daemon.sh\u003C\u002Fp>\u003Cp>Corresponding lib folder: \u002Fusr\u002Flib\u002Floginsight\u002Fapplication\u002Flib\u002F\u003C\u002Fp>\u003Cp>\u003Cstrong>Process 2157:\u003C\u002Fstrong>\u003C\u002Fp>\u003Cp>Process parameters correspond to file: \u002Fusr\u002Flib\u002Floginsight\u002Fapplication\u002Fsbin\u002FvI18nManager\u003C\u002Fp>\u003Cp>Corresponding lib file: \u002Fusr\u002Flib\u002Floginsight\u002Fapplication\u002F3rd_party\u002FvI18nManager-logInsight-8.10.latest.jar\u003C\u002Fp>\u003Cp>\u003Cstrong>Process 2327:\u003C\u002Fstrong>\u003C\u002Fp>\u003Cp>Process parameter corresponding file: \u002Fusr\u002Flib\u002Floginsight\u002Fapplication\u002F3rd_party\u002Fapache-tomcat-8.5.82\u002Fbin\u002Fcatalina.sh\u003C\u002Fp>\u003Cp>Corresponding lib folder: \u002Fusr\u002Flib\u002Floginsight\u002Fapplication\u002F3rd_party\u002Fapache-tomcat-8.5.82\u002F\u003C\u002Fp>\u003Cp>\u003Cstrong>Process 3097:\u003C\u002Fstrong>\u003C\u002Fp>\u003Cp>Process parameter corresponding file: \u002Fusr\u002Flib\u002Floginsight\u002Fapplication\u002Flib\u002Fapache-cassandra-3.11.11\u002Fconf\u002Fjvm.options\u003C\u002Fp>\u003Cp>Corresponding lib folder: \u002Fusr\u002Flib\u002Floginsight\u002Fapplication\u002Flib\u002Fapache-cassandra-3.11.11\u002Flib\u002F\u003C\u002Fp>\u003Cp>Method to add debug parameters to process 3097:\u003C\u002Fp>\u003Cp>Modify file \u002Fusr\u002Flib\u002Floginsight\u002Fapplication\u002Flib\u002Fapache-cassandra-3.11.11\u002Fconf\u002Fjvm.options\u003C\u002Fp>\u003Cp>Add content: -agentlib:jdwp=transport=dt_socket,server=y,suspend=n,address=1414\u003C\u002Fp>\u003Cp>Restart service: service loginsight restart\u003C\u002Fp>\u003Cp>Add firewall rule: iptables -I INPUT -p tcp --dport 1414 -j ACCEPT\u003C\u002Fp>\u003Ch2>0x03 Database Operations\u003C\u002Fh2>\u003Cp>---\u003C\u002Fp>\u003Ch3>1. Reset web login user admin password\u003C\u002Fh3>\u003Cp>Implementation file: \u002Fusr\u002Flib\u002Floginsight\u002Fapplication\u002Fsbin\u002Fli-reset-admin-passwd.sh\u003C\u002Fp>\u003Cp>Database operation-related information can be obtained from the file, as shown in the figure below\u003C\u002Fp>\u003Cp>\u003Cimg alt=\"Alt text\" src=\"\u002Fapi\u002Fmedia\u002Ffile\u002Fdocx_image_1770015147703_2_4bb28201b3-1.png\">\u003C\u002Fp>\u003Ch3>2. Command parameters for connecting to the database\u003C\u002Fh3>\u003Cp>Implementation file: \u002Fusr\u002Flib\u002Floginsight\u002Fapplication\u002Flib\u002Fapache-cassandra-3.11.11\u002Fbin\u002Fcqlsh-no-pass\u003C\u002Fp>\u003Cp>The file content is as follows:\u003C\u002Fp>\u003Ctable>\u003Ctbody>\u003Ctr>\u003Ctd>\u003Cp>_bin() {\u003Cbr>    local CASSANDRA_BIN=$(find $BASE -name nodetool | sort | tail -n 1)\u003Cbr>    if [ ! -e \"$CASSANDRA_BIN\" ]; then\u003Cbr>        echo \"ERROR: Unable to locate Cassandra's bin directory!\"\u003Cbr>        exit 255\u003Cbr>    else\u003Cbr>        # Echo the bin directory\u003Cbr>        echo ${CASSANDRA_BIN%\u002F*}\u003Cbr>    fi\u003Cbr>    return 0\u003Cbr>}\u003Cbr>\u003Cbr>BASE=\"$(dirname $(readlink -f $0 2>\u002Fdev\u002Fnull) 2>\u002Fdev\u002Fnull)\u002F\"\u003Cbr>if [ $? != 0  ]; then\u003Cbr>    # If mac then no need to worry about symlink\u003Cbr>    BASE=\"$(dirname $0)\"\u003Cbr>    BASE=\"${BASE%.*}\"\u003Cbr>    if [ ! -z \"$BASE\" ]; then\u003Cbr>        BASE=\"$BASE\u002F\";\u003Cbr>    fi\u003Cbr>elif [ \"$BASE\" == \"\u002Fopt\u002Fvmware\u002Fbin\u002F\" ]; then\u003Cbr>    BASE=\"\u002Fusr\u002Flib\u002Floginsight\u002Fapplication\u002Flib\u002Fapache-cassandra-*\"\u003Cbr>fi\u003Cbr>\u003Cbr>CASSANDRA_BIN=$(_bin)\u003Cbr>if [ $? != 0 ]; then\u003Cbr>    echo $CASSANDRA_BIN\u003Cbr>    exit 255\u003Cbr>fi\u003Cbr>\u003Cbr>user_password=`$CASSANDRA_BIN\u002Fcredentials-look-up | tr \"\\n\" \" \" | sed 's\u002F.*\"\\(.*\\)\".*\"\\(.*\\)\".*\u002F\\1\\t\\2\u002Fg'`\u003Cbr>cuser=`echo \"${user_password}\" | cut -f1`\u003Cbr>cpassword=`echo \"${user_password}\" | cut -f2`\u003Cbr>\u003Cbr>$CASSANDRA_BIN\u002Fcqlsh -u $cuser -p $cpassword --cqlshrc=\u002Fstorage\u002Fcore\u002Floginsight\u002Fcidata\u002Fcassandra\u002Fconfig\u002Fcqlshrc \"$@\"r\u003C\u002Fp>\u003C\u002Ftd>\u003C\u002Ftr>\u003C\u002Ftbody>\u003C\u002Ftable>\u003Cp>Specific parameters for database operations can be obtained from the file:\u003C\u002Fp>\u003Cul>\u003Cli>Obtain username and password from $CASSANDRA_BIN\u002Fcredentials-look-up\u003C\u002Fli>\u003Cli>Configuration file is \u002Fstorage\u002Fcore\u002Floginsight\u002Fcidata\u002Fcassandra\u002Fconfig\u002Fcqlshrc\u003C\u002Fli>\u003C\u002Ful>\u003Ch3>3. Username and password for database connection\u003C\u002Fh3>\u003Cp>Implementation file: \u002Fusr\u002Flib\u002Floginsight\u002Fapplication\u002Flib\u002Fapache-cassandra-3.11.11\u002Fbin\u002Fcredentials-look-up\u003C\u002Fp>\u003Cp>Returns username and password after execution:\u003C\u002Fp>\u003Ctable>\u003Ctbody>\u003Ctr>\u003Ctd>\u003Cp>\u003Ccassandra-user value=\"lisuper\">\u003Cbr>\u003Ccassandra-password value=\"slshitn2@S\">\u003C\u002Fcassandra-password>\u003C\u002Fcassandra-user>\u003C\u002Fp>\u003C\u002Ftd>\u003C\u002Ftr>\u003C\u002Ftbody>\u003C\u002Ftable>\u003Cp>The implementation principle involves reading the file \u002Fstorage\u002Fcore\u002Floginsight\u002Fconfig\u002Floginsight-config.xml* and extracting plaintext username and password credentials from the XML file\u003C\u002Fp>\u003Ch3>4. Database connection configuration information\u003C\u002Fh3>\u003Cp>Implementation file: \u002Fstorage\u002Fcore\u002Floginsight\u002Fcidata\u002Fcassandra\u002Fconfig\u002Fcqlshrc\u003C\u002Fp>\u003Cp>File contents are as follows:\u003C\u002Fp>\u003Ctable>\u003Ctbody>\u003Ctr>\u003Ctd>\u003Cp>[connection]\u003Cbr>hostname = 127.0.0.1\u003Cbr>port = 9042\u003Cbr>client_timeout = 120\u003Cbr>ssl = true\u003Cbr>\u003Cbr>;[authentication]\u003Cbr>;username = cassandra\u003Cbr>;password = cassandra\u003Cbr>\u003Cbr>[ssl]\u003Cbr>certfile = \u002Fstorage\u002Fcore\u002Floginsight\u002Fcidata\u002Fcassandra\u002Fconfig\u002Fcacert.pem\u003Cbr>;usercert = cert.pem\u003Cbr>;userkey = cert_key.pem\u003C\u002Fp>\u003C\u002Ftd>\u003C\u002Ftr>\u003C\u002Ftbody>\u003C\u002Ftable>\u003Cp>Based on the above content, two methods for connecting to the database can be summarized:\u003C\u002Fp>\u003Ch4>(1) Using a file with pre-packaged parameters\u003C\u002Fh4>\u003Ctable>\u003Ctbody>\u003Ctr>\u003Ctd>\u003Cp>\u002Fusr\u002Flib\u002Floginsight\u002Fapplication\u002Flib\u002Fapache-cassandra-3.11.11\u002Fbin\u002Fcqlsh-no-pass\u003C\u002Fp>\u003C\u002Ftd>\u003C\u002Ftr>\u003C\u002Ftbody>\u003C\u002Ftable>\u003Ch4>(2) Connecting using parameters\u003C\u002Fh4>\u003Ctable>\u003Ctbody>\u003Ctr>\u003Ctd>\u003Cp>\u002Fusr\u002Flib\u002Floginsight\u002Fapplication\u002Flib\u002Fapache-cassandra-3.11.11\u002Fbin\u002Fcqlsh -u lisuper -p slshitn2@S --cqlshrc=\u002Fstorage\u002Fcore\u002Floginsight\u002Fcidata\u002Fcassandra\u002Fconfig\u002Fcqlshrc\u003C\u002Fp>\u003C\u002Ftd>\u003C\u002Ftr>\u003C\u002Ftbody>\u003C\u002Ftable>\u003Cp>From the returned results, it can be seen that the database uses CQL (Cassandra Query Language)\u003C\u002Fp>\u003Cp>Commands for querying user configuration:\u003C\u002Fp>\u003Ctable>\u003Ctbody>\u003Ctr>\u003Ctd>\u003Cp>select * from logdb.user;\u003Cbr>select * from logdb.user_auth;\u003C\u002Fp>\u003C\u002Ftd>\u003C\u002Ftr>\u003C\u002Ftbody>\u003C\u002Ftable>\u003Ch3>5. Graphical interface for database operations\u003C\u002Fh3>\u003Cp>Here, the software TablePlus is used\u003C\u002Fp>\u003Cp>Firewall configuration needs to be modified to open port 9042: iptables -I INPUT -p tcp --dport 9042 -j ACCEPT\u003C\u002Fp>\u003Cp>Certificate file to use: \u002Fstorage\u002Fcore\u002Floginsight\u002Fcidata\u002Fcassandra\u002Fconfig\u002Fcacert.pem\u003C\u002Fp>\u003Cp>Successful connection is shown in the figure below\u003C\u002Fp>\u003Cp>\u003Cimg alt=\"Alt text\" src=\"\u002Fapi\u002Fmedia\u002Ffile\u002Fdocx_image_1770015151129_3_e89e82a920-1.png\">\u003C\u002Fp>\u003Ch2>0x04 Summary\u003C\u002Fh2>\u003Cp>---\u003C\u002Fp>\u003Cp>After setting up the vRealize Log Insight vulnerability debugging environment, we can proceed to study the vulnerability.\u003C\u002Fp>\u003C\u002Fbody>\u003C\u002Fhtml>",608,"Onedaysec",4,"published","2026-02-02T07:25:20.011Z",{"title":37,"description":14,"keywords":38,"ogImage":39,"canonicalUrl":39,"noIndex":40},"vRealize Log Insight Vulnerability Debugging Environment Setup Guide","vRealize Log Insight, vulnerability debugging, environment setup, VMware, OVA installation, remote debugging, database operations",null,false,[],{"docs":43,"hasNextPage":40},[44,45,4,46],944,943,941,{"title":39,"description":39,"image":39},"2026-07-24T15:37:10.681Z","2026-07-23T16:02:18.410Z","draft","2026-07-23T16:15:40.768Z"]