Created 03-01-2017 06:48 AM
I create VM CentOS on VMware. I want to deploy Metron on it. Can you help me. Many Thanks.
Created 03-01-2017 07:01 AM
Hello @Lee Adrian,
The following article should help with deploying a Metron cluster using Ambari:
If you are looking to deploy a vagrant-based quick-dev environment, then the instructions are here:
https://github.com/apache/incubator-metron/tree/master/metron-deployment/vagrant/quick-dev-platform
Created 03-31-2017 01:37 AM
Hi @asubramanian. Thank you for your reply. I done configured. Index pattern is bro_index_*
Created 03-31-2017 06:00 AM
That's great, @Lee Adrian! You're welcome!
Created 03-01-2017 06:19 PM
What version of CentOS? If you just have a CentOS VM and want to install quick-dev of full-dev, you can run my script here, but it only works on 6.8.
Created 03-10-2017 07:47 AM
Hello @Jon Zeolla.
I use CentOS 7. I will try your script on CentOS 6.8. How many node do build on your script?
Created 03-10-2017 11:09 AM
It builds whichever vagrant setup you choose, so the default quick dev, full, etc. Also note that I think some changes will be hitting Metron master today which aren't entirely tested with my script yet, and that also soft requires centos7 (it really requires docker which isn't officially supported on centos6 but you can get it to work if you want. YMMV). If you want to alpha test my centos7 script, checkout the centos7 branch.
Created 03-10-2017 08:17 PM
I worked on this some more today. Given all of the recent build changes to Metron master and the fact that ansible 2.0.0.2 is broken in numerous ways (pip install is broken, brew install is broken, etc.) I gave up and I'm focusing on the upgrade to ansible 2.2. The centos7 branch of my script does not work and will be abandoned.
Created 04-01-2017 07:25 AM
I run command on YAF Server but Kibana not pattern index yaf_index*. Can you help me?
nohup /usr/local/bin/yaf --silk --ipfix=tcp --live=pcap --out=node1 --ipfix-port=6667 --in=eth0 --applabel --max-payload=384 &
Created 06-13-2017 06:38 AM
Is it recommended to run Metron on Docker?