The following steps provide instructions on how to install a full working Metron application on a single node VM with Vagrant. This deployment option is ideal for experimenting and playing with the Metron application. While these instructions should work on most development environments, these instructions were tested on Mac OS X El Capitan.
Deploy Metron as a single VM via Vagrant and Ansible:
vagrant plugin install vagrant-hostmanager
The vagrant up process will run through a series of Ansible scripts,
installing Ambari, HDP, and Metron on the single-node VM. The process should
take about 45 - 60 minutes depending on your hardware configuration.
Verify That Apache Metron is Deployed Successfully
Check Ambari to make sure all the services are up by going to Ambari. Sign on with the default login and password "admin". The Ambari dashboard should look like the following:
Verify that four Storm topologies have been deployed: bro, enrichment, snort, and yaf.
From Ambari, navigate to Storm -> Quick Links -> Storm UI. You should see the four storm topologies deployed. The Metron Storm UI should look something like the following:
Check that the enrichment topology has emitted some data (this could take a few minutes to show up in the Storm UI). The storm enrichment topology UI should look something like the following:
Go to the Metron UI (at http://node1:5000). Check indexes to make sure indexing is done correctly and data is visualized. The Metron UI should look something like the following:
Check that some data is written into HDFS for at least one of the data sources
vagrant ssh node1
sudo su hdfs
hadoop fs -ls /apps/metron/enrichment/indexed