This article will show you how to install the 1H Hawk software for your server and guide you through all steps you need to accomplish in order to have a fully functional system.
Important note: Before proceeding to Hawk installation, please make sure to review its hardware, OS and software requirements.
Installation script download
All 1H software is installed with the help of a simple script. You need to download the script on your server by pasting the command in your server console:
wget http://sw.1h.com/1h_install.sh && chmod 755 1h_install.sh
When installing the 1H software you have selected this installation script will make an automatic check of your server software for compatibility reasons. If your server needs to have software installed or upgraded in order to have the 1H product functional on that machine, the script will ask for your agreement to automatically complete the required updates. In case critical software is missing or does not correspond to 1H requirements, the installation process will be completely stopped and you will need to install or update the software yourself. An example of critical software for all 1H products is the operation system being older than CentOS 5.x. You may read here the Guardian technical requirements.
IMPORTANT: You need the 1H Admin Portal to be installed for one and only one of your servers. Generally it is recommended to use a separate server for the 1H Portal only. The Portal itself is a necessary requirement to use all other 1H Software due to several reasons:
- First and most important you need the Portal to be installed for the first sever so that information about all other servers that have 1H Software installed on them is successfully added in the portal.
- Via the 1H Admin Portal you get an interface where you can monitor the Real Time Status for all your servers.
- Additionally you get unified interfaces for all other data that you can monitor for a single server.
The Portal installation can be accomplished by running the following command:
All dependencies will be automatically downloaded also.
Once you have the 1H Admin Portal installed for one server you can proceed with the package installation on all other servers without going through this step.
The Hawk installation can be accomplished by running the command below. Note that first you need to have the 1H installation script downloaded on the server.
All dependencies are automatically downloaded and installed.
All 1H Software use specific URLs. For this purpose you need to adjust the DNS settings for the server hostname accordingly. You need the specific sub-domain - 1h.$servername.
If the DNS zone for the server (i.e. serverdemo.com) is not managed by the server itself, but from an outside DNS server - You will need to create an A record for the 1h.$servername sub-domain name pointing to the primary IP address of the server.
serverdemo.com has IP address 10.101.10.101
You will need to create 1h.serverdemo.com which resolves to 10.101.10.101:
1h.serverdemo.com IN A 10.101.10.101
Hawk Local Interface
In the given example the local interface for Hawk will be accessible at:
The Hawk local interface by default is not password protected. However, if you would like to password-protect it, we have generated a sample .htaccess file for you. The default file is located under the following path:
If you would like to password protect your software, please use the following command:
mv /home/1h/public_html/htaccess.default /home/1h/public_html/.htaccess
You will be assigned login details for your local interface. The username is admin and you can recover the password we have assigned by using the following command:
grep access_pass /usr/local/1h/etc/web.conf | cut -d = -f 2
The Hawk local interface will provide you with detailed information regarding failed login attempts and bruteforce attacks to the server.
Detailed information you can find in the Hawk Local Web Interface article.
Portal Centralized Interface
The 1H Portal interface provides you with general information for all your servers with 1H Software installed on them. The 1H Portal interface is available via the following URL:
The Portal interface is also password protected. The username for the login is always admin and the password can be withdrawn running the following command on the server:
grep access_pass /usr/local/1h/etc/web.conf
You will get:
NB: You should have received an email with the needed login details for the 1H Portal at the administrative email for WHM upon finalizing the portal installation. In any case you can use the procedure described above to reclaim the password.
IMPORTANT: In order to have a server included in the Portal Centralized interface it should be added to an existing Server Group in the 1H Admin Portal. Server Groups and Servers management are explained in details in the Server Groups section. Generally all you need to do is follow these steps:
- Login to the 1H Admin Portal interface and go to Server Groups
- Double click on an existing Server Group
- Click the "Add server" button in the lower right part of the page
- Enter the server name and IP address and click "Add Server"
NB: Note that it will take up to 24 hours for the data in the centralized interface to be updated after you have added a new server.
The Admin Portal Web Interface for Hawk will provide you with general statistics for all servers added under Server Groups.
More detailed information you can find in the Hawk Admin Portal Web Interface article.
The Hawk configuration file is /home/1h/etc/hawk.conf. Generally it is not recommended to make changes to it manually in case you do not know what exactly you are doing. You can use the Hawk WHM Plugin configuration tool instead.
You can find detailed instructions how to manage the configuration in the Hawk Configuration section.
Here you can find list of relevant articles regarding the 1H Hawk Software.