203 lines
8.2 KiB
Bash
203 lines
8.2 KiB
Bash
#!/bin/bash
|
|
|
|
echo '.'
|
|
echo ' /$$$$$$ /$$ /$$ /$$$$$$ /$$$$$$$$ /$$$$$$ /$$ /$$ /$$$$$$ /$$$$$$$$ /$$$$$$ /$$$$$$ /$$ /$$'
|
|
echo '|_ $$_/| $$$ | $$ /$$__ $$|__ $$__//$$__ $$| $$ | $$ /$$__ $$|__ $$__/|_ $$_/ /$$__ $$| $$$ | $$'
|
|
echo ' | $$ | $$$$| $$| $$ \__/ | $$ | $$ \ $$| $$ | $$ | $$ \ $$ | $$ | $$ | $$ \ $$| $$$$| $$'
|
|
echo ' | $$ | $$ $$ $$| $$$$$$ | $$ | $$$$$$$$| $$ | $$ | $$$$$$$$ | $$ | $$ | $$ | $$| $$ $$ $$'
|
|
echo ' | $$ | $$ $$$$ \____ $$ | $$ | $$__ $$| $$ | $$ | $$__ $$ | $$ | $$ | $$ | $$| $$ $$$$'
|
|
echo ' | $$ | $$\ $$$ /$$ \ $$ | $$ | $$ | $$| $$ | $$ | $$ | $$ | $$ | $$ | $$ | $$| $$\ $$$'
|
|
echo ' /$$$$$$| $$ \ $$| $$$$$$/ | $$ | $$ | $$| $$$$$$$$| $$$$$$$$| $$ | $$ | $$ /$$$$$$| $$$$$$/| $$ \ $$'
|
|
echo '|______/|__/ \__/ \______/ |__/ |__/ |__/|________/|________/|__/ |__/ |__/ |______/ \______/ |__/ \__/'
|
|
echo '.'
|
|
|
|
echo '.'
|
|
echo ' /$$$$$$$$ /$$ /$$$$$$ /$$$$$$ /$$$$$$$$ /$$$$$$ /$$$$$$ /$$$$$$ /$$$$$$$$ /$$$$$$ /$$$$$$$ /$$$$$$ /$$ /$$'
|
|
echo '| $$_____/| $$ /$$__ $$ /$$__ $$|__ $$__/|_ $$_/ /$$__ $$ /$$__ $$| $$_____/ /$$__ $$| $$__ $$ /$$__ $$| $$ | $$ /$$'
|
|
echo '| $$ | $$ | $$ \ $$| $$ \__/ | $$ | $$ | $$ \__/| $$ \__/| $$ | $$ \ $$| $$ \ $$| $$ \__/| $$ | $$ | $$'
|
|
echo '| $$$$$ | $$ | $$$$$$$$| $$$$$$ | $$ | $$ | $$ | $$$$$$ | $$$$$ | $$$$$$$$| $$$$$$$/| $$ | $$$$$$$$ /$$$$$$$$'
|
|
echo '| $$__/ | $$ | $$__ $$ \____ $$ | $$ | $$ | $$ \____ $$| $$__/ | $$__ $$| $$__ $$| $$ | $$__ $$ |__ $$__/'
|
|
echo '| $$ | $$ | $$ | $$ /$$ \ $$ | $$ | $$ | $$ $$ /$$ \ $$| $$ | $$ | $$| $$ \ $$| $$ $$| $$ | $$ | $$'
|
|
echo '| $$$$$$$$| $$$$$$$$| $$ | $$| $$$$$$/ | $$ /$$$$$$| $$$$$$/| $$$$$$/| $$$$$$$$| $$ | $$| $$ | $$| $$$$$$/| $$ | $$ |__/'
|
|
echo '|________/|________/|__/ |__/ \______/ |__/ |______/ \______/ \______/ |________/|__/ |__/|__/ |__/ \______/ |__/ |__/'
|
|
echo ' '
|
|
echo '/$$ /$$ /$$$$$$ /$$$$$$$ /$$$$$$ /$$ /$$ /$$$$$$'
|
|
echo '| $$ /$$/|_ $$_/| $$__ $$ /$$__ $$| $$$ | $$ /$$__ $$ /$$'
|
|
echo '| $$ /$$/ | $$ | $$ \ $$| $$ \ $$| $$$$| $$| $$ \ $$ | $$'
|
|
echo '| $$$$$/ | $$ | $$$$$$$ | $$$$$$$$| $$ $$ $$| $$$$$$$$ /$$$$$$$$'
|
|
echo '| $$ $$ | $$ | $$__ $$| $$__ $$| $$ $$$$| $$__ $$ |__ $$__/'
|
|
echo '| $$\ $$ | $$ | $$ \ $$| $$ | $$| $$\ $$$| $$ | $$ | $$'
|
|
echo '| $$ \ $$ /$$$$$$| $$$$$$$/| $$ | $$| $$ \ $$| $$ | $$ |__/'
|
|
echo '|__/ \__/|______/|_______/ |__/ |__/|__/ \__/|__/ |__/'
|
|
echo ' '
|
|
echo ' /$$ /$$$$$$ /$$$$$$ /$$$$$$ /$$$$$$$$ /$$$$$$ /$$$$$$ /$$ /$$'
|
|
echo '| $$ /$$__ $$ /$$__ $$ /$$__ $$|__ $$__//$$__ $$ /$$__ $$| $$ | $$'
|
|
echo '| $$ | $$ \ $$| $$ \__/| $$ \__/ | $$ | $$ \ $$| $$ \__/| $$ | $$'
|
|
echo '| $$ | $$ | $$| $$ /$$$$| $$$$$$ | $$ | $$$$$$$$| $$$$$$ | $$$$$$$$'
|
|
echo '| $$ | $$ | $$| $$|_ $$ \____ $$ | $$ | $$__ $$ \____ $$| $$__ $$'
|
|
echo '| $$ | $$ | $$| $$ \ $$ /$$ \ $$ | $$ | $$ | $$ /$$ \ $$| $$ | $$'
|
|
echo '| $$$$$$$$| $$$$$$/| $$$$$$/| $$$$$$/ | $$ | $$ | $$| $$$$$$/| $$ | $$'
|
|
echo '|________/ \______/ \______/ \______/ |__/ |__/ |__/ \______/ |__/ |__/'
|
|
echo '.'
|
|
|
|
echo '.'
|
|
echo '**********************'
|
|
echo '* INSTALLATION: Debut paramétrage'
|
|
echo '**********************'
|
|
echo '.'
|
|
echo ' - Installation'
|
|
|
|
java -version
|
|
|
|
sudo mv /Vagrantfiles/GeoIP.conf /etc/GeoIP.conf
|
|
|
|
geoipupdate
|
|
|
|
sudo mv /Vagrantfiles/geoipupdate /etc/cron.weekly/geoipupdate
|
|
|
|
echo '.'
|
|
echo '**********************'
|
|
echo '* INSTALLATION: Fin paramétrage'
|
|
echo '**********************'
|
|
echo '.'
|
|
|
|
echo '.'
|
|
echo '**********************'
|
|
echo '* INSTALLATION: Debut elasticsearch'
|
|
echo '**********************'
|
|
echo '.'
|
|
|
|
sudo mv /Vagrantfiles/elasticsearch.repo /etc/yum.repos.d/elasticsearch.repo
|
|
|
|
rpm --import https://artifacts.elastic.co/GPG-KEY-elasticsearch
|
|
|
|
yum clean all && yum makecache
|
|
|
|
yum install elasticsearch -y
|
|
|
|
rpm -qi elasticsearch
|
|
|
|
systemctl daemon-reload && systemctl enable elasticsearch && systemctl start elasticsearch
|
|
|
|
netstat -plntu
|
|
|
|
curl http://localhost:9200
|
|
|
|
curl -X PUT "http://127.0.0.1:9200/mytest_index"
|
|
|
|
echo '.'
|
|
echo '**********************'
|
|
echo '* INSTALLATION: Fin elasticsearch'
|
|
echo '**********************'
|
|
echo '.'
|
|
|
|
echo '.'
|
|
echo '**********************'
|
|
echo '* INSTALLATION: Debut kibana'
|
|
echo '**********************'
|
|
echo '.'
|
|
|
|
yum install kibana -y
|
|
|
|
sudo mv /Vagrantfiles/kibana.yml /etc/kibana/kibana.yml
|
|
|
|
systemctl daemon-reload && systemctl enable kibana && systemctl start kibana
|
|
|
|
netstat -plntu
|
|
|
|
echo '.'
|
|
echo '**********************'
|
|
echo '* INSTALLATION: Fin kibana'
|
|
echo '**********************'
|
|
echo '.'
|
|
|
|
echo '.'
|
|
echo '**********************'
|
|
echo '* INSTALLATION: Debut logstash'
|
|
echo '**********************'
|
|
echo '.'
|
|
|
|
yum install logstash -y
|
|
|
|
cd /etc/logstash/conf.d
|
|
|
|
wget https://raw.githubusercontent.com/a3ilson/pfelk/master/conf.d/01-inputs.conf
|
|
wget https://raw.githubusercontent.com/a3ilson/pfelk/master/conf.d/05-syslog.conf
|
|
wget https://raw.githubusercontent.com/a3ilson/pfelk/master/conf.d/10-pf.conf
|
|
wget https://raw.githubusercontent.com/a3ilson/pfelk/master/conf.d/11-firewall.conf
|
|
wget https://raw.githubusercontent.com/a3ilson/pfelk/master/conf.d/50-outputs.conf
|
|
|
|
mkdir -p /etc/logstash/conf.d/patterns && cd /etc/logstash/conf.d/patterns
|
|
|
|
wget https://raw.githubusercontent.com/a3ilson/pfelk/master/conf.d/patterns/pf-09.2019.grok
|
|
|
|
systemctl daemon-reload && systemctl enable logstash && systemctl start logstash
|
|
|
|
echo '.'
|
|
echo '**********************'
|
|
echo '* INSTALLATION: Fin logstash'
|
|
echo '**********************'
|
|
echo '.'
|
|
|
|
echo '.'
|
|
echo '**********************'
|
|
echo '* INSTALLATION: Debut divers'
|
|
echo '**********************'
|
|
echo '.'
|
|
|
|
yum install filebeat auditbeat metricbeat packetbeat heartbeat-elastic -y
|
|
|
|
systemctl daemon-reload && systemctl enable filebeat && systemctl start filebeat
|
|
systemctl daemon-reload && systemctl enable auditbeat && systemctl start auditbeat
|
|
systemctl daemon-reload && systemctl enable metricbeat && systemctl start metricbeat
|
|
systemctl daemon-reload && systemctl enable packetbeat && systemctl start packetbeat
|
|
systemctl daemon-reload && systemctl enable heartbeat-elastic && systemctl start heartbeat-elastic
|
|
|
|
systemctl status elasticsearch
|
|
systemctl status kibana
|
|
systemctl status logstash
|
|
|
|
echo '.'
|
|
echo '**********************'
|
|
echo '* INSTALLATION: Debut divers'
|
|
echo '**********************'
|
|
echo '.'
|
|
|
|
echo '.'
|
|
echo '**********************'
|
|
echo '* INSTALLATION: Debut Firewall'
|
|
echo '**********************'
|
|
echo '.'
|
|
|
|
firewall-cmd --permanent --zone=public --add-port=5044/tcp
|
|
firewall-cmd --permanent --zone=public --add-port=5140/tcp
|
|
firewall-cmd --permanent --zone=public --add-port=5140/udp
|
|
firewall-cmd --permanent --zone=public --add-port=5601/tcp
|
|
firewall-cmd --reload
|
|
|
|
echo '.'
|
|
echo '**********************'
|
|
echo '* INSTALLATION: Fin Firewall'
|
|
echo '**********************'
|
|
echo '.'
|
|
|
|
cat > /etc/motd << EOF
|
|
|
|
/$$$$$$$$ /$$$$$$ /$$$$$$$ /$$$$$$ /$$$$$$ /$$$$$$$$ /$$ /$$ /$$$$$$ /$$ /$$ /$$$$$$$$
|
|
|__ $$__/|_ $$_/| $$__ $$ /$$__ $$ /$$__ $$| $$_____/ | $$$ /$$$|_ $$_/| $$$ | $$| $$_____/
|
|
| $$ | $$ | $$ \ $$| $$ \__/ | $$ \ $$| $$ | $$$$ /$$$$ | $$ | $$$$| $$| $$
|
|
| $$ | $$ | $$$$$$$/| $$$$$$ /$$$$$$| $$ | $$| $$$$$ /$$$$$$| $$ $$/$$ $$ | $$ | $$ $$ $$| $$$$$
|
|
| $$ | $$ | $$____/ \____ $$|______/| $$ | $$| $$__/|______/| $$ $$$| $$ | $$ | $$ $$$$| $$__/
|
|
| $$ | $$ | $$ /$$ \ $$ | $$ | $$| $$ | $$\ $ | $$ | $$ | $$\ $$$| $$
|
|
| $$ /$$$$$$| $$ | $$$$$$/ | $$$$$$/| $$ | $$ \/ | $$ /$$$$$$| $$ \ $$| $$$$$$$$
|
|
|__/ |______/|__/ \______/ \______/ |__/ |__/ |__/|______/|__/ \__/|________/
|
|
|
|
Bienvenue dans la version Centos 7 Elasticsearch.Kibana.Logstack
|
|
|
|
- Elasticsearch, Kibana and Logstack
|
|
|
|
To test your environment is correctly working, just open following URL from your Host OS:
|
|
http://localhost/info.php
|
|
|
|
EOF
|