Support Questions

Find answers, ask questions, and share your expertise
Announcements
Celebrating as our community reaches 100,000 members! Thank you!

How to deploy Metron on CentOS VM of VMware?

avatar
Contributor

I create VM CentOS on VMware. I want to deploy Metron on it. Can you help me. Many Thanks.

1 ACCEPTED SOLUTION

avatar
Super Collaborator
hide-solution

This problem has been solved!

Want to get a detailed solution you have to login/registered on the community

Register/Login
17 REPLIES 17

avatar
Contributor

Hi @asubramanian. Thank you for your reply. I done configured. Index pattern is bro_index_*

avatar
Super Collaborator

That's great, @Lee Adrian! You're welcome!

avatar
Explorer

What version of CentOS? If you just have a CentOS VM and want to install quick-dev of full-dev, you can run my script here, but it only works on 6.8.

avatar
Contributor

Hello @Jon Zeolla.

I use CentOS 7. I will try your script on CentOS 6.8. How many node do build on your script?

avatar
Explorer

It builds whichever vagrant setup you choose, so the default quick dev, full, etc. Also note that I think some changes will be hitting Metron master today which aren't entirely tested with my script yet, and that also soft requires centos7 (it really requires docker which isn't officially supported on centos6 but you can get it to work if you want. YMMV). If you want to alpha test my centos7 script, checkout the centos7 branch.

avatar
Explorer

I worked on this some more today. Given all of the recent build changes to Metron master and the fact that ansible 2.0.0.2 is broken in numerous ways (pip install is broken, brew install is broken, etc.) I gave up and I'm focusing on the upgrade to ansible 2.2. The centos7 branch of my script does not work and will be abandoned.

avatar
Contributor

Hi @asubramanian

I run command on YAF Server but Kibana not pattern index yaf_index*. Can you help me?

nohup /usr/local/bin/yaf --silk --ipfix=tcp --live=pcap --out=node1 --ipfix-port=6667 --in=eth0 --applabel --max-payload=384 &

avatar
Explorer

Hi @asubramanian,

Is it recommended to run Metron on Docker?