mathieue

Se connecter avec le user elastic.

Aller dans management -> roles

Créer un role.
Le nommer log_view.
Mettre l'ccés en lecture à kibana_sample_data_log.

Créer un utilisateur.

mathieue

socat - udp4-listen:8125,fork | tee >(socat - udp-sendto:127.0.0.1:8135) >(socat - udp-sendto:127.0.0.1:8140)

mathieue

output.file:
  path: "chemin/vers/le/dossier/de/sortie"
  filename: winlogbeat
  rotate_every_kb: 10000
  number_of_files: 7
  codec.json:
    pretty: false

output.file:
  path: "chemin/vers/le/dossier/de/sortie"

mathieue

$headers = New-Object "System.Collections.Generic.Dictionary[[String],[String]]"
$headers.Add("Content-Type", "application/json")

$body = '{ "logger.logstash.inputs.jdbc" : "ERROR" }'

$url = 'http://localhost:9600/_node/logging?pretty'

$response = Invoke-RestMethod -Uri $url -Method 'PUT' -Headers $headers -Body $body

mathieue

socat -d -d tcp-l:1234,reuseaddr,fork file:/dev/ttyUSB0,nonblock,raw,echo=0,waitlock=/var/run/tty,min=0,b38400

mathieue

## Generated by install_server.sh ##
# Redis configuration file example

# Note on units: when memory size is needed, it is possible to specify
# it in the usual form of 1k 5GB 4M and so forth:
#
# 1k => 1000 bytes
# 1kb => 1024 bytes
# 1m => 1000000 bytes
# 1mb => 1024*1024 bytes

mathieue

TP SECU

Dans le fichier de configuration elasticsearch.yml
xpack.security.enabled: true 

Relancer elasticsearch.

Se connecter a kibana: est-il accessible ?

Se connecter a elasticsearch sur le port 9200: est-il accessible ?

mathieue

<VirtualHost *:80>
    ServerName es.yourhost.com
    
    <Proxy balancer://main>
        BalancerMember http://127.0.0.1:9200 max=1 retry=5

        <Limit GET > 
                order deny,allow 
                deny from all 
                allow from 127.0.0.1

mathieue

console.log("runing playlist converter api demo....");

var name = "Super Playlist";

var tracks = [];

tracks.push("Shape of You Ed Sheeran");
tracks.push("One Dance Drake");

let tracksJoined = tracks.join("\n");

mathieue

apt-get install munin-plugins-extra libio-all-lwp-perl 
echo "[nginx_*]
env.url http://localhost/nginx_status
" > /etc/munin/plugin-conf.d/nginx

vi /etc/nginx/sites-available/default 
# in server section
location /nginx_status {
    stub_status on;
    access_log   off;