diff --git a/README.md b/README.md index 463e9f9..08fa684 100644 --- a/README.md +++ b/README.md @@ -4,13 +4,13 @@ doc/kafka_topics.sh # Initialize elasticsearch -curl -X PUT 'http://:9200/threatline' -d@doc/es_mapping.json +curl -X PUT 'http://:9200/threatline' -d@doc/es_mapping.json # Install service file -cp doc/threatline /usr/local/etc/rc.d/threatline +cp doc/threatline /usr/local/etc/rc.d/threatline # Enable threatline -sysrc threatline_enable=YES +sysrc threatline_enable=YES sysrc threatline_agents="normalize enrich check archive" # Start threatline @@ -21,8 +21,8 @@ tail -f /tmp/tl_worker.log # Stages -Normalize: Touch-up/rename fields, etc. -Enrich: Enrich and part of the message. -Check: Checks parts of message (now enriched) against known bad stuff. -Archive: Push document into elasticsearch. Can also log to file. +Normalize: Touch-up/rename fields, etc. +Enrich: Enrich and part of the message. +Check: Checks parts of message (now enriched) against known bad stuff. +Archive: Push document into elasticsearch. Can also log to file.