...
The AWS environment is intended to install Metron in the AWS cloud. By default Metron is installed with a few demo sensors. To build the AWS environment in full run the following commands:
cd metron-deployment/amazon-ec2/
./run.sh
This will spin up your full AWS environment. At the end of the install the environment summary will be displayed as follows:
ok: [localhost] => {
"Success": [
"Apache Metron deployed successfully",
" Metron @ [METRON_HOST]:5000",
" Ambari @ [AMBARI_HOST]:8080",
" Sensor Status @ [SENSOR_HOST]:2812",
" Topology Status @ [MONIT_HOST]:2812",
"For additional information, see https://metron.incubator.apache.org/'"
]
}
Leave the enrichment topology running and kill the other parser topologies (bro, snort, or yaf) with either the "storm kill" command or with the Storm UI at http://node1:8744/index.html. Now lets install the Squid sensor.
...