Skip to content

ait-aecid/alert-aggregation-dashboard

Folders and files

NameName
Last commit message
Last commit date

Latest commit

 

History

9 Commits
 
 
 
 
 
 
 
 
 
 

Repository files navigation

AMiner CTI Dashboard

A Kibana plugin


Ansible installation

To install the AMiner CTI dashboard run:

ansible-playbook site.yml

Under hosts you can specify in which hosts the dashboard is to be installed.

You can specify the dashboard version (wrt. to Kibana version) in roles > aminer-cti > defaults > main.yml

Note: It is important for the kibana version to reflect the kibana-plugin version.

Manual installation

To install the AMiner CTI Kibana plugin, choose the appropriate version and run:

sudo /usr/share/kibana/bin/kibana-plugin install file:///path/to/aminer-7.10.x.zip

The zip files can be found under roles > aminer-cti > plugins

After the successful plugin installation, restart Kibana with:

sudo systemctl restart kibana

Notes

In case of plugin reinstallation, remove the already installed plugin using:

sudo rm -r /usr/share/kibana/plugins/aminer

This dashboard shows alerts generated by the aggregation generator. To generate such alerts, please go here and run generator.py.

About

Visualization of alerts and meta-alerts

Resources

Stars

Watchers

Forks

Releases

No releases published

Packages

No packages published