This repository has been archived by the owner on Apr 16, 2021. It is now read-only.
-
Notifications
You must be signed in to change notification settings - Fork 521
Automating Setup
doug edited this page Aug 27, 2019
·
9 revisions
Please note! This wiki is no longer maintained. Our documentation has moved to https://securityonion.net/docs/. Please update your bookmarks. You can find the latest version of this page at: https://securityonion.net/docs/Automating-Setup.
You can automate the Setup process using sosetup.conf
.
Copy the example file to your home directory:
cp /usr/share/securityonion/sosetup.conf ~
Edit your new sosetup.conf
using nano
or your favorite text editor:
nano ~/sosetup.conf
Run Setup with the -f switch and the path to this file:
sudo sosetup -f ~/sosetup.conf
As of securityonion-setup - 20120912-0ubuntu0securityonion201, sosetup
now supports a -w
switch that allows you to answer the standard Setup questions and have it write out your custom sosetup.conf:
http://blog.securityonion.net/2016/03/securityonion-setup-20120912.html
For example:
# Configure sosetup to write out a new configuration file called sosetup.conf
sosetup -w ~/sosetup.conf
# Answer all questions in Setup
# Run sosetup with the new configuration file
sudo sosetup -f ~/sosetup.conf
- Introduction
- Use Cases
- Hardware Requirements
- Release Notes
- Download/Install
- Booting Issues
- After Installation
- UTC and Time Zones
- Services
- VirtualBox Walkthrough
- VMWare Walkthrough
- Videos
- Architecture
- Cheat Sheet
- Conference
- Elastic Stack
- Elastic Architecture
- Elasticsearch
- Logstash
- Kibana
- ElastAlert
- Curator
- FreqServer
- DomainStats
- Docker
- Redis
- Data Fields
- Beats
- Pre-Releases
- ELSA to Elastic
- Network Configuration
- Proxy Configuration
- Firewall/Hardening
- Email Configuration
- Integrating with other systems
- Changing IP Addresses
- NTP
- Managing Alerts
- Managing Rules
- Adding Local Rules
- Disabling Processes
- Filtering with BPF
- Adjusting PF_RING for traffic
- MySQL Tuning
- Adding a new disk
- High Performance Tuning
- Trimming PCAPs