桃教網指令

桃教網指令

C:\Windows\system32>cd /d E:\ELK\elasticsearch-curator-5.2.0-amd64\curator-5.2.0-amd64\ 

E:\ELK\elasticsearch-curator-5.2.0-amd64\curator-5.2.0-amd64>curator --config curator.yml delete_indeces.yml 
2018-02-05 12:00:03,160 INFO      Preparing Action ID: 1, "delete_indices"
2018-02-05 12:00:03,254 INFO      Trying Action ID: 1, "delete_indices": Delete indices older than 1 days (based on index name), for logstash- prefixed indices. Ignore the error if the filter does not result in an actionable list of indices (ignore_empty_list) and exit cleanly.
2018-02-05 12:00:03,317 INFO      Skipping action "delete_indices" due to empty list: <class 'curator.exceptions.NoIndices'>
2018-02-05 12:00:03,317 INFO      Action ID: 1, "delete_indices" completed.
2018-02-05 12:00:03,317 INFO      Job completed.



cento to ntopng command:cento -i ens2f1  --zmq tcp://172.30.254.25:5556                              --v9 192.168.1.200:2055 
ntopng listening command:ntopng -i tcp://*:5556c -F "logstash;172.30.254.25;tcp;5510" --local-networks "163.30.0.0/16"
Cento to Kafka command: cento -i ens2f1 --kafka "172.30.254.24:9092,172.30.254.24:9093;topicFlowsCento"

curl -u elastic 'http://172.30.254.23:9200/_xpack/security/_authenticate?pretty'
監控cluster狀態: 172.30.254.28:9200/_cluster/state?pretty

苗網指令

cd /d D:\nProbe
start nprobe /c --zmq "tcp://*:2055" -i none -n none --collector-port 5556
cd /d D:\ntopng
start ntopng /c -i tcp://127.0.0.1:2055 -F "logstash;163.19.163.230;tcp;5510" --local-networks "163.19.0.0/16"

cd /d D:\elasticsearch-5.6.5\bin
echo "starting elasticsearch"
start elasticsearch

cd /d D:\kibana-5.6.5-windows-x86\bin
echo "starting kibana"
start kibana

cd /d D:\ELK\logstash-6.1.1\bin
echo "starting logstash"
start logstash -f flow.conf