236 lines
12 KiB
Bash
236 lines
12 KiB
Bash
#!/bin/bash
|
|
# Configure Logstash for Odin
|
|
#
|
|
|
|
echo -e "\e[93m"
|
|
|
|
log() {
|
|
echo -e "\t\e[96m[*]${1}\e[93m"
|
|
}
|
|
|
|
export IP=$(ip route | awk '/src/{print $9}')
|
|
echo "logstash" >/etc/hostname
|
|
echo -e "${IP}\tlogstash" >> /etc/hosts
|
|
|
|
deluser -q --remove-home ubuntu
|
|
|
|
apt-get update || exit 1
|
|
apt-get --purge remove snapd lxd -y
|
|
apt-get upgrade -y
|
|
apt-get install -y htop wget default-jre prometheus-node-exporter
|
|
|
|
wget -qO - https://artifacts.elastic.co/GPG-KEY-elasticsearch | apt-key add -
|
|
echo "deb https://artifacts.elastic.co/packages/5.x/apt stable main" >/etc/apt/sources.list.d/elastic-5.x.list
|
|
apt-get update
|
|
apt-get install logstash -y
|
|
apt-get clean
|
|
|
|
cat >/etc/logstash/conf.d/odin.conf <<EOF
|
|
input{
|
|
kafka {
|
|
bootstrap_servers => "kafka:9092"
|
|
topics => ["conn", "dhcp", "dns", "files", "http", "intel", "notice", "software", "ssh", "ssl", "weird", "x509", "stats", "smtp", "fsf"]
|
|
consumer_threads => 4
|
|
decorate_events => true
|
|
codec => "json"
|
|
type => "odin"
|
|
}
|
|
}
|
|
|
|
filter{
|
|
mutate {
|
|
remove_field => ["[kafka][key]", "[beat]"]
|
|
}
|
|
if [id.orig_h] {
|
|
geoip {
|
|
source => "id.orig_h"
|
|
target => "geoip"
|
|
}
|
|
if ![geoip.ip] {
|
|
if [id.resp_h] {
|
|
geoip {
|
|
source => "id.resp_h"
|
|
target => "geoip"
|
|
}
|
|
}
|
|
}
|
|
}
|
|
mutate {
|
|
remove_tag => ["_geoip_lookup_failure"]
|
|
}
|
|
}
|
|
|
|
output{
|
|
if [type] == "odin" {
|
|
elasticsearch {
|
|
hosts => ["elasticsearch:9200"]
|
|
index => "odin-%{+YYYY.MM.dd}"
|
|
template => "/etc/logstash/odin_mapping.json"
|
|
template_name => "odin-*"
|
|
template_overwrite => true
|
|
}
|
|
}
|
|
|
|
if "fsf" in [tags] {
|
|
elasticsearch {
|
|
hosts => ["elasticsearch:9200"]
|
|
index => "fsf-%{+YYYY.MM.dd}"
|
|
template => "/etc/logstash/fsf_mapping.json"
|
|
template_name => "fsf-*"
|
|
template_overwrite => true
|
|
}
|
|
}
|
|
|
|
}
|
|
EOF
|
|
|
|
cat >> /etc/logstash/odinmap.gz.b64 <<EOFLOL
|
|
H4sICHhPglkAA29kaW5fbWFwcGluZy5qc29uAO1dz5PbJhS+56/Y8bGTzrSbSQ85NdMee+rk1AuD
|
|
xZNMjIAAsteb2f+9gHfVIEtC1rK9+OWwE0ufP9DHM7z3xI/v7+7uNlRwasFuPt19f3ofLjhotaAO
|
|
Np82inH580+beNmCc1w2Eeg/+ytcMnjoP/oLsmu3YIiqid1RwwJ08yF+e3DbgBa8ohHwyybef/J/
|
|
z+W3VOukIH8tVOSHz/GaNkqDcRzs4E68+7vjLVhHWz1yNyLcSUOoAAvPOgA8vb/gO4CxXA1r0d+v
|
|
OQg2VpMesYfTURk2A4kw3khlgNCtOoTq3X/8bViX0ad4YZ/APo1cv3jIhNDBg8vL8vlzTt6tUgKo
|
|
zFP9XZDqz2JUX/4oR/XlrykD6clqoegC2f/J8QglmzwNrZw36clK3ahNB1UOQJi0vqP61vleJNts
|
|
y+X2xDUXo33WekZetZpUSk435SpaV70Jq++YTVnKjpWtqKTi9DhTyVv9YUh7RFUuVLHWVxgY4ZOu
|
|
xq0q07kdoS44lMW60EBpu6oCm2VcPDBvTw5CX18dylSy8m4pqXaUS1J3fLLhb9UsKq53YFCUBH0W
|
|
hVDRoDAJuhIcpENREnSlWm18F+i9dzSZEXWkJD72DzkMFOYHdBQGR6RLXTpzQFtJ0Qy025Xxhxj3
|
|
vpXD5NmFLsUzDMworWFKpus9Y2Zx5E3RrDN0zpSvTOSFFPVWcLsr2Ghw8A6TJdqoqoxVPRN6Q+3y
|
|
1VxGGXJgkrbY6abogqnBEHmiugm6ATWdo5l9ndSjKu5OZMZwe2BW4h65TOoefp3k/dcWSv/yb6wJ
|
|
+nuL2nisSbIMwUN1XPruhlSKoci5gtaK3ElnTlHie9Q4U9DrNf6AGmcKep3G2B8vKGidxKyli3ri
|
|
Od8kX8rkqNwjsPlWNZ/wsYrrljffaNSyoBhVzQVFF8V4R4xoxeWqomTzfzySVj4yE+iFvJ1tGmhC
|
|
+hoVXlDQqxTG4XFBQesUDnNZHpVEeXMFzco7Fu5ng/kdCIX5jQS949Ypc0JVEvROYRJ7gA6SEF82
|
|
ypKgX2TBV+rj0mSn0i/LTJeerTqd516W01WGN2TqVWePwiF8lYcUxc2G969LHxiwGhswW9DaIMKL
|
|
W6YBV/l53JJgQ7muYvHbUc93hG1LuShIaTuc0Dh8KFrv6es6Zj9G2K4FQxqjOkwR5gpa2UHXtYUp
|
|
B/mijHUdtKa+ra9JEK4rxinNp6Y89CA0k+Kh+B4e0GW+UEVQ7zKHla4YZqVoP6ja8zKw3Ai8cBJV
|
|
eP0gynoJZ8rg+xSjbOnkdKwbNQSvCPYbI6pwURvVoiwJumUfUZEE3cKkjVyXQGnB7RROFkzRrR+f
|
|
yPNXUJf/0K2PdoGRuGaykPl5Ri6bopQWR5UUjZOtLyXxqDBL3qlKTSaDblUbhYvnBmgvCa+yIcvi
|
|
cCAmxgt2eZEPl5tPCMN1ca3FPaGMYdo3RUdpet8JbTFFn9+G7Ust9/PPbGqhjiVtu9BLXk2nV4/e
|
|
aONrwJdEA3SQhDCwFQqTon0fQQTN5jMXJkhDj0MWrg1e+PMOjILLfUG6cgtWo1OPFpWgvSYPfLr5
|
|
b1SVb5Wg+Z2kllndmWtuuvXNqjyXR7tS5ABHjUeE6QCn/g7QZmZxyZV2F6nQ7saE0Q4H2wHagB8J
|
|
oI1bvRLLH0sZ4Qutoc0b0Ib9XsuzdnIv1VEWZa7BGAymBmgDX6FyBTeSed6biGwVOxEB2T1vlrae
|
|
LZqMi3wv+8lgwilFn8XBrPC4MGWzwpESs8KT0mBWePwbz1Psi2WFA52SFsr3211bcnRxk8vyrkxv
|
|
mQcS1iehWaVoCyBL9m8WzAGdrgH6LAoGhuPKzLwwv1VVdvRXlCRBW1W7IzU4225Um87gb2iAtgZn
|
|
0qfosNl5Z+f20rl2rD8T4jzKC2G6LSqSoL0iIe+EqiRo2+l4QgOp1aTLfGWYU/g4rrAAi6kuG4Qt
|
|
DuhKHuzlRLnjfZwKO7kVDIScodKSghvknwmn97G4kq3UKYMO4+pRWdBNHUpS+AA+3Lr8QhGpqQnr
|
|
bvAY2lF5DEdFEnRnw2liDR6dNRTmQAVncbdacg5yUJ8EjR1MyvLy/3hA+bund/8CSVx0OTV9AAA=
|
|
EOFLOL
|
|
base64 -d /etc/logstash/odinmap.gz.b64 > /etc/logstash/odin_mapping.json.gz
|
|
gunzip /etc/logstash/odin_mapping.json.gz
|
|
|
|
cat > /etc/logstash/fsfmap.gz.b64 <<EOFLOL
|
|
H4sICDhfg1kAA2ZzZl9tYXBwaW5nLmpzb24A7V3bdts4ln3PV2jpcVa8pqrTme6pp2IkJtaUbyOp
|
|
nLheuGAKklnmRUNS6bh65d+HoizJpA4IwJJjQNx4SQwcEtA+Fx7sA0r/ftPpdFkYsIxn3V86//7+
|
|
tlNty/GcR/OQ5bz7S3eaTU/+o/u2MpzxPA/iWXl9Z/fyQiKIJ/wbNbwaLyTiRXTLUy+ZetkdSyfL
|
|
e3XfFfPsjqd8HgY+KyV+6pbj33du+/T+39+uFhGx+bxcZqdYyPq+YTJ7+nfRM0+TOU/zgGfVgWLo
|
|
1zyIeJazaF4fWoL0MOfL7u5kidSTscf51/f4ytMsSOKmO+T8W959Wx2cBjyc7CypHLrnD/9K0gk1
|
|
9vSua7G3uzLBLE5S7rHb5Gsp+7f3/1UT+v5G9Ff14zlhgV3TZ7tNkpCzWAzQxyDkMYv4kQJ0efsn
|
|
9ymExHZXDp+7Y8f74IwGPW9w8fFS8Fmab7K6Uf+9aEwC8UZIDPVGpBHy3dnE0G9k5SpYt+9kP9X7
|
|
nZqvOzp1fgZE6z4RRMXNAdK6TwTS+5//BpDWfTRIwV9EqN9ddIshyrIJ50TKsbvsdoC001fv2YFx
|
|
9fS8cp//1HRS/y7Iiyf3IoW5bvpIc+0Ne0Bo3UcjVGxxmJ/zNMjywG/4nAqWWYo5o7OhKhINuJeC
|
|
cuxLMSX8qzPLdVDKq+th2WhdNI2QOiln7rtXQFFxRIzix8thzy02KWP303AwvgGiiiNiRC8uvcHo
|
|
8swZDy4vAKfiiBjOkXsKFBVHxCiO3eH54MI580bu8Nodes5nZyhIsDbXANdNvxDXz/1zrz8cFJAC
|
|
TMWRvfOxJJoHIW/46Ehbi5ncOE8frpIgJujL3aW3GKglhd0ZPy5tv8y+f3aGMKA4Io6p7hc8mVRH
|
|
GvKmm9HYPQeQiiP7RpFBxGb8A8vAN236BDjNkzTvFJHyAEzKp/7gXQNlX8rAxDf9wljxmzu8cM8A
|
|
pfKIGMrfiw0WgFQeOVA4OWXZHQLvuo9EasizZJH6q1S3KfYCrCJ54n4eJDFg2vTRMOVpEM+WG6hB
|
|
PE1UwEpWB2qoGXb6FAuF12NvcDG6cntjegEqBcNogmM2mz5S1QWCEQuD+B44rftonJIsyIOvahE2
|
|
TOIZ6QvkrdPHCA4NrPtEMM2L0M09P5koYaWnhcxnsVeeGoUaHvvEOAVgaTd9QpQOcaTg7Ib5EgDU
|
|
blWKTvjy8EwTxb4RbToqXG/CXVN5p8W82at2p5TsnkphtR1UKaq8i6quQm0nVV6jt5taNvGOSjba
|
|
DLbwXPuOJNBWGT0kheBcf4IrE8LtNS64srWu/C/WdAS1FII3Nwken33Bm231Zj4LsjN2C38mhNtr
|
|
YfBnW/15Fgf5IoI7E8LtNTC4s63ufBcXD+eT63dwaEK4vSYGh7bVocPglt0yuDMh3F4Dgzvb6s5x
|
|
HjycONeyM/Jw6CbB4zMxOLStDp367DZoeL+olII7Nwken4HBnW11568sgzNTwu01Lziztc4cpNg5
|
|
U8LtNS84s6XO/IEFk8XJIM55GrPliykshGsTwu01Nri2ra4d5H0+5fGEp3BpQri9RgaXttWl79lX
|
|
+DIh3F7rgi/b6ssPOT/lacO7zaUY/LlJ8PgsDP5sqT/3nPHJ/y4C//6UYw9NCrfXzODUtjr1ecN3
|
|
2JcScOUmweMzLriyra4cssi5hjcTwu21L3izrd6cRMkEe2dKuL32BW+21ZsfUi7RDJy5ZeYFZ7bU
|
|
mfvpZ44vMqCE22tecGZLndkdueOTi8u+9IvH4dFNgsdnY/BoWz06yoIsmeJ1DEq4vRYGf7bUnz+e
|
|
XKUJvJkSbq99wZut9eYR9xt/W74Ugz83CR6fhcGfbfXnpPDSmOP5TAm318Lgz5b686c+y/HyMyXc
|
|
XvOCM1vqzIN7li4kIMKbW2Zf8GZLvfl/AhbPogDnSCjh9loY/NlSf/7tH8uv9bwO8IimhdtrZHBp
|
|
a13602f4MiHcXuuCL9vqyywrHDW7f4BDE8LtNTE4tKUOfc7C5U9K3j7kMleFT7fMyuDTtvq070w5
|
|
DpNQwu21L3iz1d588unziTsJcqmW4NgtMzU4tq2OHfhp8jlJw8kJH/kMfk0Jt9fS4Nc2+zVethII
|
|
t9fE4NCWOvSFc3F5sixLf0VZWiDcXjuDV1vq1VcsnuBQNyXcXvOCM1vqzMMgC+IZvJkQbq99wZst
|
|
9ebR71fucJlwj+YPy+o0/JoQbq+lwa9t9etkfpdgA00Jt9e+4M22evNDxOLCAeHPhHB7LQz+bKk/
|
|
j3ns8xhVK0q4vQYGd7bVne/4KfPv8TvQpHB7TQwObatDJzkLyx93z8CIUcLttTL4tK0+nfJ4Uh4Y
|
|
g0cTwu21MXi09R59cposMt5jIX4YmhJur7XBty317esPDn4ShxRur3nBmW115sHV0IUzE8LtNS84
|
|
s63OHAyTW/wgDincXgODO1vqzn8EYfiAlzMo4fbaF7zZVm9OYlShSeH2mhec2VJnjpc/PFn4H/yZ
|
|
EG6vhcGfzfZnsp/qJTXZze7Yz2LwlNSmoC41NemoR0MtB4CouDlAWveRIOXLM0wqGIVJPKOiO33b
|
|
IsDcJhn3oqzhHeC2KWCnr96zg2V31HMuvBtn6NCfTeGp3p3mHv/W8GBVzAy6bJHfJbJdg+rjQvFR
|
|
of6Y0H1EaD4eDpmw+Uk0Z7HsC9uB5KZfiOSEZ7KXnQDjpl8IY8iyPEqUwyeQPGTIfyP6q6Kv7vL7
|
|
KDvjICICeaNmGrTRrAEV1BWQVv58ySL1j/bDLaKIpUTElzx7u+fJZBGKnstSj5R4otwDVT1P0eOe
|
|
kwBd3mY8/cqWX7PcZhhuWCqovhzjx1d0qyCeL3JvvbojjBv3bHpPqF0WNfzCVxYRT71Zmizm7TGb
|
|
Ha9JptOMC4jR5p3t7r3mrABc/G3vurfLk3kgyF2PUTWKBi9SmBjd6vXZMWcROZsRizyOj3ZUMfxN
|
|
/X+bD9udZtPqqhpieffXvMj3s5xFRAzffoqybCJE9lch1W8rupWP54QFdk2fjahLVe/wMQh5zI52
|
|
X3V5+ydZG5TlEO6X8dDpjT33/IPb77v95/OPqxV4P+3PQPZ55qfBXOEnV8BVbPqFrM9aw38MriRo
|
|
apSO5cp+xl1L8d6wpyKnofzNBeply1Jcq3RZXZF6+bK8Tr+EuWzNZUwVicbicbmyXhJF0q+m2UhD
|
|
I/tKKGlknvIs64zJXIq8BnrZV0JdL3zSGQV/QTMGaSblRercGT1kOY+gF2P0csayvBMlk6DATvuA
|
|
EPTyTAm5Xs7dseN9cEaDnje4+HipqBm9NG81Uf/9c4BWVH15kZ76y0u0TaC6Oj0zKK99niksm9wc
|
|
VKWkZrFs3dGp03AabUccKtttr6CyxtNxOxdAabvtFZT2/mfJFx5ULoDSdtsPV5py2l+KQ2W77Uer
|
|
LMsmnAsqp+QFUNpuO6DSfkB2e0HWAEhRbDb2lZCr44pl2fKTdIb8/xZBqr8RVHghSW0lv8c+KJzX
|
|
sZLG8ee//fRYpFDYsaBIIb/O3BiCIoWBGkGRwmC94AlnnGZQpDBSLyhSmKkXFCnayA+gSHG0KkOR
|
|
YnWtVUpDkWJ1rUVKQ5Fida09KkORYnOtEUr7AdktihRGbTZQpJCJt8BKGsf3LlIo5FEoUsivMzeG
|
|
oEhhoEZQpDBYL3jCGacZFCmM1AuKFGbqBUWKNvIDKFIcrcpQpFhda5XSUKRYXWuR0lCkWF1rj8pQ
|
|
pNhca4TSfkB2iyKFUZsNFClk4i2wksbxvYsU71CkIFdki3WgSCG4zmiNoEhhsF7whDNOMyhSGKkX
|
|
FCnM1AuKFG3kB1CkOFqVoUixutYqpaFIsbrWIqWhSLG61h6VoUixudYIpf2A7BZFCqM2GyhSyMRb
|
|
YCWN43sXKf6OIgW5IlusA0UKwXVGawRFCoP1gieccZpBkcJIvaBIYaZeUKRoIz+AIsXRqgxFitW1
|
|
VikNRYrVtRYpDUWK1bX2qAxFis21RijtB2S3KFIYtdlAkUIm3gIraRxvLFIIx0QjDb/dHUswVtZ0
|
|
m38BXYs80PkVdCWyQMsZNRxRzwmf44DPcL6Xqu2pbfIBtdKoFGqlzTnAVhqVgq20qQbYSqMSsJUS
|
|
KECtNNoMteomFmArjR4yGxr1nAvvxhk6h8uDprmXTKeBz73iktj7FoUKmtc8g8MW+V2SYv9jzC55
|
|
uTNl8QM0YoxGJjzzoQ5j1BGyLI8SnCKwgLJpzGWKp9tfgUougyeaynXmOiyeaKZpBE80o9SBJ5o1
|
|
T7RDbhhzlkpO26MMIemnenf76j07Oum6X8ZDpzf2Pv0xuKLBUchC1AsiiimNvBACA9n2ix1NWuQA
|
|
jNv+JhilBQwAue1vAlJanACQ234xkNLCA2Dc9gthVCkqAEhJ/6Ezkb0SkcdXdn/aPwORvqILw9j2
|
|
Cz1M6dVaILntb0JS9ZVY4Lntl+KpdA4SiG77xYiqv4IKPLf9Qjw1Xh0Fntt+nNpUWoWpB1NwatMY
|
|
qHFqs95warO6CjvBxqnNesOpzeoqTAX7gNmQ/BVBJJXbfiGMmq/2Kb/SJ55R8xU+aFHST/KX1ErX
|
|
5GJDBgpyEeQiMbMNSIJcfAE8EaH1RkAuglwkZzYeT5CLNuyfQC4aAzXIxXoDuVhdhZ1gg1ysN5CL
|
|
1VWYCvYBsyGQixojIBe3YhZrkezXJxdxdLEiD3ZROrMNSIJdfAE8EaL1RsAugl0kZzYeT7CLNmyg
|
|
wC4aAzXYxXoDu1hdhZ1gg12sN7CL1VWYCvYBsyGwixojYBe3YhZrkezXZxdxdrEiD3ZROrMNSIJd
|
|
fAE8EaL1RsAugl0kZzYeT7CLNmygwC4aAzXYxXoDu1hdhZ1gg12sN7CL1VWYCvYBsyGwixojYBe3
|
|
YhZrkezXZxcbHtRgF8EuEjPbgCTYxRfAEyFabwTsIthFcmbj8QS7aMMGCuyiMVCDXaw3sIvVVdgJ
|
|
NtjFegO7WF2FqWAfMBsCu6gxAnZxK2axFsl+fXbxHdjFp/JgF6Uz24Ak2MUXwBMhWm8E7CLYRXJm
|
|
4/FEPq0xgnx6K2axFg+UT/8d+fRTeeTT0pltQBL5NPJpkxFFPo182mA8kU9rjCCf3opZrMUD5dMN
|
|
p1GQTyOfJma2AUnk08inTUYU+TTyaYPxxOlXfXWV15hzmgqnX3caTr9WV2Er2Dj9Wm84/Wo91Dj9
|
|
SjScfj2ipBLsoljSOC2S/frsYkNWBHYR7CIxsw1Igl18ATwRovVGwC6CXSRnNh5PsIs2bKDALhoD
|
|
NdjFegO7WF2FnWCDXaw3sIvVVZgK9gGzIbCLGiNgF7diFmuR7NdmF/HFnRV5kIvSmW1AEuTiC+CJ
|
|
CK03AnIR5CI5s/F4gly0Yf8EctEYqEEu1hvIxeoq7AQb5GK9gVysrsJUsA+YDYFc1BgBubgVs1iL
|
|
ZL82uYjv7azIg1yUzmwDkiAXXwBPRGi9EZCLIBfJmY3HE+SiDfsnkIvGQA1ysd5ALlZXYSfYIBfr
|
|
DeRidRWmgn3AbAjkosYIyMWtmMVaJPu1yUV8iXlFHuSidGYbkAS5+AJ4IkLrjYBcBLlIzmw8niAX
|
|
bdg/gVw0BmqQi/UGcrG6CjvBBrlYbyAXq6swFewDZkMgFzVGQC5uxSzWItmvTS7iF10q8iAXpTPb
|
|
gCTIxRfAExFabwTkIshFcmbj8QS5aMP+CeSiMVCDXKw3kIvVVdgJNsjFegO5WF2FqWAfMBsCuagx
|
|
AnJxK2axFsl+bXIRP+hSkQe5KJ3ZBiRBLr4AnojQeiMgF0EukjMbjyfIRRv2TyAXjYEa5GK9gVys
|
|
rsJOsEEu1hvIxeoqTAX7gNkQyEWNEZCLWzGLtUj2a5OL/wC5+FQe5KJ0ZhuQBLn4AngiQuuNgFwE
|
|
uUjObDyeIBdt2D+BXDQGapCL9QZysboKO8EGuVhvIBerqzAV7ANmQyAXNUZALm7FLNYi2a9NLv4T
|
|
5OJTeZCL0pltQBLk4gvgiQitNwJyEeQiObPxeIJctGH/BHLRGKhBLtYbyMXqKuwEG+RivYFcrK7C
|
|
VLAPmA2BXNQYAbm4FbNYi2S/Nrn43yAXn8qDXJTObAOSIBdfAE9EaL0RkIsgF8mZjccT5KIN+yeQ
|
|
i8ZADXKx3kAuVldhJ9ggF+sN5GJ1FaaCfehs6PLyy/nZ4RIhf/6LX4BxpXyF1u1XU5SbDG2FToqL
|
|
RDzeujWa8nbyJNWdXMGmywvU7boU17Lt6orU7bu8Tt/Gl63ZzlUk5BoJiz3S+eMW6cMDFGOMYtT2
|
|
rRvxAztqyr8GWZDEMIgfZRBGPNNQMNMYMalgNuo5F96NM3QOl4tEQeZ7SfItCr1lTuLp5Bm6SQlb
|
|
5HdICwx6+izLryxGPmCORiY886EOY9SxzJuLFA0aaVV+hHMpq/ai51J2+uo9O/pRq0wpJCXNlSgl
|
|
dSqoUk2NOirUUN++B4SaK0iASKHyA5AUKjYASVppAUQKFZK2gfTcp6d79vH5j00n9e+ggnUf7crc
|
|
z4Mk7iwptoZPCayWWD1Et0kIqCR9ip59eeb29vBtGTfXNjWQFuvLjmkDpc5j+bcIgl5ZpAJWj30k
|
|
VjyeBKyh/gaQHlk4b1Up9UvLAl7rPhKvKIi4t14acOqIcIpvvTmbAaVNH4lSkTxMFj5HbiDuU0zR
|
|
rvp7JGj/2Xt8rPbxVH3SR5rsCiuks9s+GqbfVqvB7mvTR+N0nkzgdU/7aJiu8KSo9dE4jYM8hDGJ
|
|
+1Qfp+5+VGaQcz9fpNDEpo8018Y3/IHQEqE7ljI/52mQ5YHf9DRV/FIFZ3Q2VEUCZw6E5zj67hVQ
|
|
VBwRo/jxcthzvcHF2P00HIxvgKjiSMP560tvMLo8c8aDywvAqTjScCraPQWKiiNiFMfu8Hxw4Zx5
|
|
I3d47Q4957MzFCRYm2uA66ZfiOvn/rnXHw4KSAGm4sje+VgSzYOw6X0MpK3FTG6cpw9XSYCC5raP
|
|
BOpjYUyS75NSzez7Z7L3iBEGNv3CmOp+wZNJdaQhb7oZjd1zAKk4sm8UGURsxj+wDHzTpk+A0zxJ
|
|
804RKQ/BpPSvnavBO8l3xsDKt/3CcPGbO7xwzwCl8siBHOGUZTh1u+lrOnWLOuamj4YpT4N4tsxm
|
|
B/E0UQErKb8nmHpR/TlVG8nr6yp1m2nu8XC6/3NB5VV0hLJtv/CpoPQKOZDc9guRlL/6DRi3/UIY
|
|
lV7ZBpKSfvWHyjIifzsAM4KIrDWCiEw3RGSBPCKydGZTkNw/Is/+CppelkVIRkgmZzYeSYRkjRGE
|
|
ZLq9Skj+kzWdi0ZERkQmZzYeSURkjRFEZLq9SkROptPA514ReGPvWxQiOtfkEZ2lMxuPJKKzxgii
|
|
M91eJzqH3PNR6avLIyhLZzYeSQRljREEZbq9SlCeTxCR6/KIyNKZjUcSEVljBBGZbq8SkdMcEbku
|
|
j4gsndl4JBGRNUYQken2KhEZRy925RGRpTMbjyQissYIIjLdXjQi7/TtvJLyRvRXRV/dkc/izjig
|
|
fiWzUTMN2mjWgArqCkgrf75kkfpH++EWUcRSIuJLnr3d82SyCEXPZalHSjxR7oGqnqfocc95QeuG
|
|
paw9H1/RnoJ4vsgFX6d9FA5zz6b3hNpl7uIncbaIeOrN0mQhSHmP0Wx2vCaZTjMu+A6V7fLCJJ7V
|
|
X6TcvdecFYCLv+Je93Z5Mg8ESdsxqkbR4EUKE6NbvT475sfncQW6N/X/rf79/ub7m/8HxfVkGcd9
|
|
AwA=
|
|
EOFLOL
|
|
|
|
base64 -d /etc/logstash/fsfmap.gz.b64 > /etc/logstash/fsf_mapping.json.gz
|
|
gunzip /etc/logstash/fsf_mapping.json.gz
|
|
|
|
rm /etc/logstash/odinmap.gz.b64
|
|
rm /etc/logstash/fsfmap.gz.b64
|
|
|
|
apt-get install -y prometheus-node-exporter
|
|
|
|
systemctl enable logstash
|
|
systemctl start logstash
|
|
echo -e "\e[0m"
|