Update README.md
This commit is contained in:
12
README.md
12
README.md
@@ -3,24 +3,24 @@
|
||||
# Configure Kafka topics (run on one kafka node)
|
||||
doc/kafka_topics.sh
|
||||
|
||||
#Initialize elasticsearch:
|
||||
# Initialize elasticsearch
|
||||
curl -X PUT 'http://<elasticsearch>:9200/threatline' -d@doc/es_mapping.json
|
||||
|
||||
#Install service file:
|
||||
# Install service file
|
||||
cp doc/threatline /usr/local/etc/rc.d/threatline
|
||||
|
||||
#Enable threatline:
|
||||
# Enable threatline
|
||||
sysrc threatline_enable=YES
|
||||
sysrc threatline_agents="normalize enrich check archive"
|
||||
|
||||
#Start threatline:
|
||||
# Start threatline
|
||||
service threatline start
|
||||
|
||||
#Monitor logs:
|
||||
# Monitor logs
|
||||
tail -f /tmp/tl_worker.log
|
||||
|
||||
|
||||
#Stages:
|
||||
# Stages
|
||||
Normalize: Touch-up/rename fields, etc.
|
||||
Enrich: Enrich and part of the message.
|
||||
Check: Checks parts of message (now enriched) against known bad stuff.
|
||||
|
||||
Reference in New Issue
Block a user