Versions Compared

Old Version 22

changes.mady.by.user James Sirota

Saved on

compared with

New Version 23

changes.mady.by.user Ryan Merriman

Saved on

Key

  • This line was added.
  • This line was removed.
  • Formatting was changed.

...

We will be using a single VM setup for this exercise.  To setup the VM do the following steps:

vagrant plugin install vagrant-hostmanager
cd metron-deployment/vagrant/singlenode-vagrant
vagrant plugin install vagrant-hostmanager
vagrant upquick-dev-platform
./launch_dev_image.sh
vagrant ssh

After executing the above commands a Metron VM will be built (called node1) and you will be logged in as user vagrant.  There will be 4 topologies running but one must be stopped because the VM only has 4 Storm worker slots available.  Leave the enrichment topology running and kill the other parser topologies (bro, snort, or yaf) with either the "storm kill" command or with the Storm UI at http://node1:8744/index.html.  Now lets install the Squid sensor.  

...