wang_zhenwei的博客

OpenSOC：安全大数据分析框架。OpenSOC已经加入Apache工程改名为Apache Metron。思科在 BroCON 大会上亮相了其安全大数据分析架构 OpenSOC，引起了广泛关注。OpenSOC 是一个针对网络包和流的大数据分析框架，它是大数据分析与安全分析技术的结合, 能够实时的检测网络异常情况并且可以扩展很多节点，它的存储使用开源项目 Hadoop，实时索引使用开源项目

Short Description:This article describes the steps to deploy a fresh HCS/Metron cluster using Ambari Server installed with management packs for Metron.ArticleNote:This article is an ex

Metron学习记录1 关于Metron1.1 Apache Metron的演变提起Apache Metron，我们必须提到OpenSoc，它的发展历程如下。1.2 Metron的核心功能和功能主题核心功能能力：安全数据库，可插入框架，安全应用程序，威胁只能平台；核心功能主题：平台，数据收集，数据处理，UI；1.3 Metron用户角色及受益点适合6类用户角

在前文中，已经解决了Metron安装过程中的报错：No interface named 'eth0' found, got [name:lo (lo), name:em1 (em1)]；但是在两个slave机上启动Elasticsearch时，还是遇到了问题，描述如下：[root@slave1 elasticsearch]# service elasticsearch startStar

Now that we have Metron configured to parse, index and persist telemetry events and Nifi pushing data to Metron, lets now visualize this streaming telemetry data in the Metron UI. We will be adding 3

备注：Metron安装方式的一种，基于单节点虚拟机安装；This install fully automates the provisioning of Apache Metron on single, virtualized host running on Virtualbox. Metron is composed of many components and in

说明：首先，在/home/szx目录下安装Metron；在目录：/home/szx/incubator-metron-Metron_0.2.0BETA_rc2/metron-platform/ 下，可以看到Metron安装的相关工具及组件；在目录：/home/szx/incubator-metron-Metron_0.2.0BETA_rc2/metron-deployment/

在安装Metron的过程中，出现以下错误：TASK [metron_elasticsearch_templates : Start Elasticsearch] ********************fatal: [slave2]: FAILED! => {"changed": false, "failed": true, "msg": "Exception in thread \"m

The following provides instructions on how to install Metron on an existing Ambari-managed HDP 2.4 cluster. These are not recommendations for production deployment but rather for dev/testing environme

Note: Adding -u user -k to the below command lines allows deployment in environments where passwordless SSH has not been enabled.cd /root/incubator-metron/metron-deployment/playbooksRun the follow

原文来自：http://slideshare.neatcn.com/hortonworks/apache-metron-meetup-may-4-2016-big-data-cybersecurity需要了解更多信息，请访问：http://hortonworks.com/apache/metron/  Apache Metron Meetup May 4, 2016

Apache Metron Proposal阿帕奇Metron提案 FINAL This proposal is now complete and has been submitted for a VOTE.该提案现已完成，并已提交表决。AbstractThe Metron project is an open source proj

This instruction can be applied both for single and multi-node deployment. It is based on the article: https://community.hortonworks.com/articles/60805/deploying-a-fresh-metron-cluster-using-ambari-se