Versions Compared

Key

  • This line was added.
  • This line was removed.
  • Formatting was changed.

...

The AWS environment is intended to install Metron in the AWS cloud.  By default Metron is installed with a few demo sensors.  To build the AWS environment in full run the following commands:

cd metron-deployment/amazon-ec2/

./run.sh

This will spin up your full AWS environment.  At the end of the install the environment summary will be displayed as follows:

ok: [localhost] => {
"Success": [
"Apache Metron deployed successfully",
" Metron @ [METRON_HOST]:5000",
" Ambari @ [AMBARI_HOST]:8080",
" Sensor Status @ [SENSOR_HOST]:2812",
" Topology Status @ [MONIT_HOST]:2812",
"For additional information, see https://metron.incubator.apache.org/'"
]
}

Leave the enrichment topology running and kill the other parser topologies (bro, snort, or yaf) with either the "storm kill" command or with the Storm UI at http://node1:8744/index.html.  Now lets install the Squid sensor.  

...