Issues with installing & running CEF collector on Linux machine

[lancepreston]

Describe the bug
Installation is semi-successful, in that many packages are installed, but receive several errors indicating "no such file" or "permission denied". Installation completes with "Omsagent restarted successfully" and "Installation completed", and returns a successful return code of 0 (zero).

To Reproduce
Steps to reproduce the behavior:

1. execute installation command:
   # wget https://raw.githubusercontent.com/Azure/Azure-Sentinel/master/DataConnectors/CEF/cef_installer.py&&sudo python cef_installer.py <workspace id> <secret key>

2. errors produced
   

3. yet those directories are created with appropriate ownership and permissions:
   

4. services do not start successfully following install
   

Expected behavior
Log agent installed successfully & sending syslog messages to Azure

Additional context
Red Hat Enterprise Linux Server release 7.7
have applied CIS benchmark: CIS_Red_Hat_Enterprise_Linux_7_v2.1.0 (level 1)

*See attached text file containing full installation output and errors
CEF Installer errors.txt

[preetikr]

@lancepreston - Please file a support ticket with the repro you have for getting unblocked on this issue. Refer to https://azure.microsoft.com/en-us/support/options/ for filing a support ticket.

[lancepreston]

Support ticket #120032424003253 was opened on 3/24/20

[preetikr]

Thanks @lancepreston - We'll investigate this and get back.

[morshabi]

Hi, this issue was answered via direct ICM to the Azure Sentinel team. To summarize the response, OMSAgent doesn't support hardening with CIS. We are working on fixing the issue with CIS but we don't have ETA.