THIS IS A TEST INSTANCE. ALL YOUR CHANGES WILL BE LOST!!!!
...
Our example sensor will be a Squid Proxy. Squid is a caching proxy for the Web supporting HTTP, HTTPS, FTP, and more. Squid logs are simple to explain and easy to parse and the velocity of traffic coming from Squid is representative of a a typical network-based sensor. Hence, we feel it's a good telemetry to use for this tutorial.
...
Step 1:
...
Acquire Metron Code and Development Environment
There are two ways to acquire Metron code for this code lab. One is to download it from the USB stick administered for this exercise. Two it would automatically be imported by running the code lab platform vagrant scripts
...
In order to verify that the messages were indexed correctly first install elastic search Head plugin:
cd /usr/share/elasticsearch/bin
sudo ./plugin install mobz/elasticsearch-head
...