From 2d4155ffce0aa43022cd3e7a938c98cb40f2d06c Mon Sep 17 00:00:00 2001 From: Shane Date: Sat, 10 Nov 2018 18:32:29 +0000 Subject: [PATCH] Update README --- README | 16 +++++++++------- 1 file changed, 9 insertions(+), 7 deletions(-) diff --git a/README b/README index fe02742..10c2794 100644 --- a/README +++ b/README @@ -1,24 +1,26 @@ -Configure Kafka topics (run on one kafka node) +## Installation on FreeBSD + +#Configure Kafka topics (run on one kafka node) doc/kafka_topics.sh -Initialize elasticsearch: +#Initialize elasticsearch: curl -X PUT 'http://:9200/threatline' -d@doc/es_mapping.json -Install service file (FreeBSD): +#Install service file: cp doc/threatline /usr/local/etc/rc.d/threatline -Enable threatline: +#Enable threatline: sysrc threatline_enable=YES sysrc threatline_agents="normalize enrich check archive" -Start threatline: +#Start threatline: service threatline start -Monitor logs: +#Monitor logs: tail -f /tmp/tl_worker.log -Stages: +#Stages: Normalize: Touch-up/rename fields, etc. Enrich: Enrich and part of the message. Check: Checks parts of message (now enriched) against known bad stuff.