Member since
03-09-2017
14
Posts
1
Kudos Received
0
Solutions
08-22-2017
02:09 PM
Thanks for the headsup @asubramanian
... View more
08-22-2017
02:08 PM
@leo leeWe fixed the issue by modifying the JAR files and replacing the metron-data-management-0.4.0.jar in /usr/metron/0.4.0/lib with the modified jar follow the instructions noted in https://github.com/apache/metron/pull/643/files see if that helps if not let me know i can upload the JAR file (its 100M though)
... View more
08-08-2017
04:22 PM
I have got taxii to work but i keep getting error message "Exception in thread "main" java.lang.IllegalStateException: Extractor must be a STIX Extractor" when i try to push the feed to Hbase Here's what the extractor file looks like { "config": { "zk_quorum": "node1:2181", "columns": { "stix_address_categories" : "IPV_4_ADDR" }, "indicator_column": "ip", "type" : "malicious_ip", "separator" : "," } ,"extractor" : "STIX" }
... View more
07-27-2017
04:56 PM
@asubramanian What version of ansible did you use to get the opentaxii feed? i tried running it on 2.0.0.2 and still getting service not defined error while checking the opentaxii status, the service is running though. I followed the work around steps but still the same error.
... View more
07-14-2017
01:45 PM
I think you are missing some rpm's are these the only rpm's in the localrepo? here's what i have in my localrepo Metron-common, metron-config,metron-data-management, metron-elasticsearch, metron-enrichment, metron-indexing, metron-parser, metron-pcap, metron-profiler, metron,rest, metron-solr Try running createrepo /localrepo again and see if that fixes the issue if not try running mvn clean install followed by cd metron-deployment/packaging/docker/rpm-docker and follow the instructions in https://cwiki.apache.org/confluence/display/METRON/Metron+0.4.0+with+HDP+2.5+bare-metal+install+on+Centos+6+with+MariaDB+for+Metron+REST
... View more
07-13-2017
10:18 PM
@msumbul What is the good number for expected_data_nodes? i have the same issue running on single node
... View more
06-09-2017
04:05 PM
Tried on Ubuntu 14 and 16 metron 0.4.0 and there is no issue with the installation and i referred https://cwiki.apache.org/confluence/pages/viewpage.action?pageId=68718548 for installation steps, just make sure to install Docker manually as well before getting to steps to start metron install. Also it depends on how you install some folders need elevated access such as "Virtualbox VM" etc. The only issue I still have on Ubuntu is I cannot bring the metron on the network, there seems to be something missing in the installation or the way it works on Ubuntu. When the metron VM is brought up using Virtual box it runs but the VM is not imported into the Virtualbox just as it does when installed on Centos.
... View more
06-01-2017
02:43 PM
I have metron installed on the singlenode VM using Vagrant and Docker ambari is running fine, but metron stops after running for few moments checked the metron-rest.log file for possible errors but nothing is written to the log file.
... View more
- Tags:
- CyberSecurity
- Metron
Labels:
- Labels:
-
Apache Metron
05-09-2017
05:26 PM
Got it working on a bare metal HDP2.5 seems to be a known issues with Virtualbox when installed on a VM. But now i have another issue, i cannot change the "node1" ip address from the default 192.168.66.121 to something that is routed over our internal network tried changing the host file and even the "Vagrantfile" in /metron-deployment/vagrant/full-dev-platform but nothing works.
... View more
05-07-2017
04:50 AM
1 Kudo
Has anyone tried installing metron on Ubuntu VM running on Hyper V or Vmware , was able to install all required components but when try to bring the machine with vagrant up get the following error. There was an error while executing `VBoxManage`, a CLI used by Vagrant
for controlling VirtualBox. The command and stderr is shown below.
Command: ["startvm", "600074f9-687c-45cc-b684-5d85390e6bf4", "--type", "headless"]
Stderr: VBoxManage: error: VT-x is not available (VERR_VMX_NO_VMX)
VBoxManage: error: Details: code NS_ERROR_FAILURE (0x80004005), component ConsoleWrap, interface IConsole
Does this mean we cant run Vagrant+virtualbox on a VM?
... View more
Labels:
- Labels:
-
Apache Metron
03-31-2017
12:35 AM
Is there a processor in Nifi that can be used to ingest traffic flow pattern /traffic flow from network firewalls to dump it into hdfs ? I am looking for something similar to user analytic explained here https://community.hortonworks.com/articles/79571/syslog-user-login-analytics-using-apache-nifi-and.html with the output being a bar graph for traffic from various countries. The firewalls can send the syslog but the listensyslog processor is unable to process the flow pattern.Is there a way this can be achieved?
... View more
Labels:
- Labels:
-
Apache NiFi