Shiyayo cyhook

TODO in production -

Elasticsearch

select large memory instance
- A machine with 64 GB of RAM is the ideal sweet spot, but 32 GB and 16 GB machines are also common. Less than 8 GB tends to be counterproductive (you end up needing many, many small machines), and greater than 64 GB has problems.
- In general, it is better to prefer medium-to-large boxes.
create swap using instance store disk, not EBS.
Disks should be ssd and iops
cfq (default I/O Scheduler in *nix) is inefficient for SSD, however, since there are no spinning platters involved. Instead, deadline or noop should be used instead. The deadline scheduler optimizes based on how long writes have been pending, while noop is just a simple FIFO queue.

sudo apt-get install libapache2-mod-php7.0 php7.0-mysql php7.0-curl php7.0-json

a2enmod ssl
sudo mkdir /etc/apache2/ssl

sudo openssl req -x509 -nodes -days 365 -newkey rsa:2048 -keyout /etc/apache2/ssl/apache.key -out /etc/apache2/ssl/apache.crt

docker-compose exec kafkazk ./bin/kafka-topics.sh --zookeeper localhost:2181 --create --topic hids --partitions 1 --replication-factor 1

Setup python

sudo apt-get install python-pip python-dev build-essential
sudo pip install --upgrade pip

Install virtual box ( ubuntu, centos )
Edit sources.list

sudo vim /etc/apt/sources.list

Use the following query - World Map:

SELECT
  UNIX_TIMESTAMP(`timestamp`) as time_sec,
  COUNT(*) as value,
  dst_country_code as metric
FROM IDS
WHERE $__timeFilter(`timestamp`) AND dst_country_code != "NULL"
ORDER BY `timestamp` ASC

cp /usr/local/lib/liblognorm.so.5 /usr/lib

Add Hard Disk to a Linux Virtual Machine

Log in as root on your Linux virtual machine.
Run this command and make note of the sdx entries

ls /dev/sd

Log in to the vCenter Server using the vSphere Client.
In the vSphere Client inventory, right-click the virtual machine and select Edit Settings.
Click the Hardware tab and click Add.
Select Hard Disk and click Next.

Elasticsearch Authentication Setup

Download Files

wget https://github.com/floragunncom/search-guard-kibana-plugin/releases/download/v5.6.3-4/searchguard-kibana-5.6.3-4.zip
wget https://github.com/floragunncom/search-guard/archive/ves-5.6.3-16.zip

/usr/share/elasticsearch/bin/elasticsearch-plugin install -b com.floragunn:search-guard-5:5.6.3-16

	#!/bin/bash

	# compiles WMIC for linux

	apt-get install autoconf

	cd /usr/src
	wget http://www.openvas.org/download/wmi/wmi-1.3.14.tar.bz2
	bzip2 -cd wmi-1.3.14.tar.bz2 \| tar xf -
	cd wmi-1.3.14/

	$ apt-get update
	$ apt-get install oracle-java8-installer# Update system
	apt-get update && apt-get uprade -y

	#Change Timezone
	echo 'Africa/Nairobi' >/etc/timezone
	sudo dpkg-reconfigure tzdata

	# Install golang-go
	wget https://storage.googleapis.com/golang/go1.9.2.linux-amd64.tar.gz