Skip to content
This repository was archived by the owner on Aug 20, 2025. It is now read-only.
Closed
Show file tree
Hide file tree
Changes from all commits
Commits
Show all changes
97 commits
Select commit Hold shift + click to select a range
0805d20
Version changes for MPack
mmiklavc Oct 2, 2017
889c1bd
save demo code
mmiklavc Oct 4, 2017
42f8218
Working through tests
mmiklavc Oct 17, 2017
084db5a
fix licensing
mmiklavc Oct 17, 2017
b33575c
fix elasticsearchdao tests
mmiklavc Oct 17, 2017
132b333
working through ES setting migrations for 2.x to 5.x
mmiklavc Oct 19, 2017
f713214
Updating to fix kibana mpack and log4j issue.
cestella Oct 19, 2017
54c2486
Removing argline..we should figure out why this is necessary, though.…
cestella Oct 19, 2017
bd48988
Avoiding log4j version mismatch.
cestella Oct 19, 2017
785e6a0
Fixed some parameter name changes.
cestella Oct 20, 2017
b8c8127
Removing and relocating old properties.
cestella Oct 20, 2017
dcb2dbd
Updating yamls.
cestella Oct 20, 2017
d5629f0
updating yaml.
cestella Oct 21, 2017
d5e5cf7
Added a limits role to adjust security. We should consider doing thi…
cestella Oct 21, 2017
67cc97d
typo
cestella Oct 21, 2017
297ed1d
forgot to remove bootstrap filter checking from master
cestella Oct 21, 2017
216b401
Merge pull request #11 from cestella/elasticsearch562_cstella
mmiklavc Oct 23, 2017
fc92aa9
Get ES templates working
mmiklavc Oct 23, 2017
f3475bf
updating tests.
cestella Oct 23, 2017
1235443
Removing log4j-core.
cestella Oct 23, 2017
46e0a05
Updating poms to exclude the storm log4j.
cestella Oct 23, 2017
798f954
Updating pom to include log4j
cestella Oct 23, 2017
9e2de3b
Adding back in teh log4j but with the right version.
cestella Oct 24, 2017
c160837
Updating dependencies with url.
cestella Oct 24, 2017
a134e23
get netty conflicts with rest api working
mmiklavc Oct 24, 2017
30795d7
Merge remote-tracking branch 'mmiklavcic/elasticsearch562' into elast…
cestella Oct 24, 2017
bdabc5b
Merge pull request #12 from cestella/elasticsearch562_tests
mmiklavc Oct 24, 2017
e13688f
Fix text/keyword types according to ES mapping recommendations
mmiklavc Oct 24, 2017
193891f
Merge branch 'elasticsearch562' of https://github.com/mmiklavc/metron…
mmiklavc Oct 24, 2017
feaa843
Merge branch 'master' into elasticsearch562_master
cestella Oct 24, 2017
5ad3e6a
Moved PAM limit configuration from Ansible to the MPack
nickwallen Oct 24, 2017
928fa04
Fixing test.
cestella Oct 24, 2017
d524e80
Fixing tests.
cestella Oct 24, 2017
d61371b
Merge remote-tracking branch 'mmiklavcic/elasticsearch562' into elast…
cestella Oct 24, 2017
255b32c
Merge pull request #13 from nickwallen/BUG-90628
mmiklavc Oct 25, 2017
70d9316
Merge pull request #14 from cestella/elasticsearch562_master
mmiklavc Oct 25, 2017
c41962a
Fixing integration test.
cestella Oct 25, 2017
43dfec7
unused constructor.
cestella Oct 25, 2017
aabd6b5
Updating.
cestella Oct 25, 2017
9999567
Merge branch 'master' into elasticsearch562_version_bump
cestella Oct 26, 2017
f11c233
Correcting a few heinous bugs.
cestella Oct 26, 2017
cd93b00
Merge pull request #15 from cestella/elasticsearch562_es_int_test
mmiklavc Oct 27, 2017
c176113
Merge pull request #16 from cestella/elasticsearch562_version_bump
mmiklavc Oct 27, 2017
8828c23
Get Kibana working. Rewrite Kibana dashboard from scratch and deploy …
mmiklavc Nov 10, 2017
3644526
Address Otto's PR comments. Fix Kibana in the Ambari Blueprint.
mmiklavc Nov 10, 2017
7d41ad2
Fix remaining Kibana drama
mmiklavc Nov 10, 2017
1616a41
Resolve merge conflicts with master. Tests still failing.
mmiklavc Nov 14, 2017
1ee1cfe
merge again with master
mmiklavc Nov 14, 2017
d31418b
Remove commented out lines
mmiklavc Nov 14, 2017
fceb312
Merge branch 'elasticsearch562' into es562-merge
mmiklavc Nov 14, 2017
94e692c
Fix string-to-keyword ES mapping
mmiklavc Nov 15, 2017
9964132
Merge branch 'master' into es562-merge
cestella Nov 16, 2017
2e69548
Merge pull request #17 from cestella/es562-merge
mmiklavc Nov 16, 2017
11e41f2
Test fixes.
cestella Nov 16, 2017
a7558de
Merge pull request #18 from cestella/elasticsearch562-inttestfixes
mmiklavc Nov 16, 2017
14fee99
Fix meta alert tests. Deprecate the data pruner
mmiklavc Nov 16, 2017
3dd651f
Merge branch 'master' into es562-mastermerge-11-17
cestella Nov 17, 2017
b9fbeaf
Merge pull request #19 from cestella/es562-mastermerge-11-17
mmiklavc Nov 17, 2017
57bc763
Merge branch 'master' into es562-mastermerge2-11-17
cestella Nov 17, 2017
02f500b
Fixing test merge error.
cestella Nov 17, 2017
601fe14
Merge branch 'master' into es562-mastermerge2-11-17
cestella Nov 17, 2017
e8bd47e
Debug guards.
cestella Nov 17, 2017
d3b86c4
String to Text
cestella Nov 17, 2017
1c45c21
One more string to text miss.
cestella Nov 17, 2017
fca9a39
Add Elasticsearch and Kibana documentation for developers and users.
mmiklavc Nov 21, 2017
a4d36cd
Merge pull request #20 from cestella/es562-mastermerge2-11-17
mmiklavc Nov 21, 2017
0ff483a
Merge branch 'master' into elasticsearch562
mmiklavc Nov 21, 2017
307ddc4
Fix docs. Change Kibana all index chart colors
mmiklavc Nov 22, 2017
a3bddb2
Merge branch 'master' into es562_11_27
cestella Nov 27, 2017
00e426a
Fixing tests.
cestella Nov 27, 2017
4581ad5
Fixing integration test.
cestella Nov 27, 2017
9d7a4bd
Add Curator documentation to metron-data-management README.
mmiklavc Nov 27, 2017
4a4871a
Undoing bad merge.
cestella Nov 27, 2017
74a5422
Fixed snort template
cestella Nov 27, 2017
4001edf
Snort template merge issue.
cestella Nov 27, 2017
c4c88db
Fixing test.
cestella Nov 27, 2017
b7a04b5
Merge remote-tracking branch 'mmiklavcic/elasticsearch562' into es562…
cestella Nov 27, 2017
46268a8
Merge pull request #21 from cestella/es562_11_27
mmiklavc Nov 27, 2017
9458a20
Add TOC to metron-data-management. Specify 5.6.2 as ES version where …
mmiklavc Nov 27, 2017
a879d2c
Merge branch 'master' into es562_11_28
cestella Nov 28, 2017
983dc44
Merge pull request #22 from cestella/es562_11_28
mmiklavc Nov 28, 2017
06cf92e
Guids are keywords.
cestella Nov 28, 2017
0fb19df
Warn level is better.
cestella Nov 28, 2017
f489439
Merge pull request #23 from cestella/es562_guid
mmiklavc Nov 28, 2017
2574b93
Merge branch 'master' into elasticsearch562
mmiklavc Nov 29, 2017
e9e92dc
Merge branch 'elasticsearch562' of https://github.com/mmiklavc/metron…
mmiklavc Nov 29, 2017
20c6139
Add Metron Error Dashboard. Documentation fixes and additions.
mmiklavc Nov 30, 2017
a3f5ee5
resolve merge conflict with master
mmiklavc Dec 1, 2017
4021834
Merge branch 'master' into elasticsearch562
mmiklavc Dec 4, 2017
0ecbef5
Fix bug with Netty and Elasticsearch 5 when num executors in Storm is…
mmiklavc Dec 8, 2017
39b5f59
Merge branch 'master' into elasticsearch562
mmiklavc Dec 19, 2017
f6ed7df
Merge conflict resolved with master
mmiklavc Jan 4, 2018
3f2c34d
Updates per comments from justinleet
mmiklavc Jan 4, 2018
8a3feb6
Resolve more merge conflicts with master
mmiklavc Jan 4, 2018
04a9292
Fix e2e tests with ES 5.6.2 templates
mmiklavc Jan 5, 2018
a02bd8b
Merge branch 'master' into elasticsearch562
mmiklavc Jan 5, 2018
4049d63
Resolve merge conflict with master 910807275
mmiklavc Jan 8, 2018
File filter

Filter by extension

Filter by extension


Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
23 changes: 23 additions & 0 deletions dependencies_with_url.csv
Original file line number Diff line number Diff line change
Expand Up @@ -310,6 +310,29 @@ org.springframework.security.kerberos:spring-security-kerberos-core:jar:1.0.1.RE
org.springframework.kafka:spring-kafka:jar:1.1.1.RELEASE:compile,ASLv2,https://github.com/spring-projects/spring-kafka
ch.hsr:geohash:jar:1.3.0:compile,ASLv2,https://github.com/kungfoo/geohash-java
org.locationtech.spatial4j:spatial4j:jar:0.6:compile,ASLv2,https://github.com/locationtech/spatial4j
Copy link
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

can we remove any of the older dependencies?

com.github.spullara.mustache.java:compiler:jar:0.9.3:compile,ASLv2,https://github.com/spullara/mustache.java/blob/master/LICENSE
io.netty:netty-buffer:jar:4.1.13.Final:compile,ASLv2,http://netty.io/
io.netty:netty-codec-http:jar:4.1.13.Final:compile,ASLv2,http://netty.io/
io.netty:netty-codec:jar:4.1.13.Final:compile,ASLv2,http://netty.io/
io.netty:netty-common:jar:4.1.13.Final:compile,ASLv2,http://netty.io/
io.netty:netty-handler:jar:4.1.13.Final:compile,ASLv2,http://netty.io/
io.netty:netty:jar:3.10.6.Final:compile,ASLv2,http://netty.io/
io.netty:netty-resolver:jar:4.1.13.Final:compile,ASLv2,http://netty.io/
io.netty:netty-transport:jar:4.1.13.Final:compile,ASLv2,http://netty.io/
joda-time:joda-time:jar:2.9.5:compile,ASLv2,https://github.com/JodaOrg/joda-time
net.sf.jopt-simple:jopt-simple:jar:5.0.2:compile,The MIT License,http://jopt-simple.sourceforge.net
org.elasticsearch.client:elasticsearch-rest-client:jar:5.6.2:compile,ASLv2,https://github.com/elastic/elasticsearch/blob/master/LICENSE.txt
org.elasticsearch.client:transport:jar:5.6.2:compile,ASLv2,https://github.com/elastic/elasticsearch/blob/master/LICENSE.txt
org.elasticsearch:elasticsearch:jar:5.6.2:compile,ASLv2,https://github.com/elastic/elasticsearch/blob/master/LICENSE.txt
org.elasticsearch:jna:jar:4.4.0-1:compile,ASLv2,https://github.com/elastic/elasticsearch/blob/master/LICENSE.txt
org.elasticsearch.plugin:lang-mustache-client:jar:5.6.2:compile,ASLv2,https://github.com/elastic/elasticsearch/blob/master/LICENSE.txt
org.elasticsearch.plugin:parent-join-client:jar:5.6.2:compile,ASLv2,https://github.com/elastic/elasticsearch/blob/master/LICENSE.txt
org.elasticsearch.plugin:percolator-client:jar:5.6.2:compile,ASLv2,https://github.com/elastic/elasticsearch/blob/master/LICENSE.txt
org.elasticsearch.plugin:reindex-client:jar:5.6.2:compile,ASLv2,https://github.com/elastic/elasticsearch/blob/master/LICENSE.txt
org.elasticsearch.plugin:transport-netty3-client:jar:5.6.2:compile,ASLv2,https://github.com/elastic/elasticsearch/blob/master/LICENSE.txt
org.elasticsearch.plugin:transport-netty4-client:jar:5.6.2:compile,ASLv2,https://github.com/elastic/elasticsearch/blob/master/LICENSE.txt
org.elasticsearch:securesm:jar:1.1:compile,ASLv2,https://github.com/elastic/elasticsearch/blob/master/LICENSE.txt
org.hdrhistogram:HdrHistogram:jar:2.1.9:compile,BSD,https://github.com/HdrHistogram/HdrHistogram/blob/master/LICENSE.txt
com.trendmicro:tlsh:jar:3.7.1:compile,ASLv2,https://github.com/trendmicro/tlsh
org.glassfish:javax.json:jar:1.0.4:compile,Common Development and Distribution License (CDDL) v1.0,https://github.com/javaee/jsonp
org.eclipse.persistence:javax.persistence:jar:2.1.1:compile,EPL 1.0,http://www.eclipse.org/eclipselink
Expand Down
8 changes: 8 additions & 0 deletions metron-analytics/metron-profiler-client/pom.xml
Original file line number Diff line number Diff line change
Expand Up @@ -139,6 +139,14 @@
<version>${global_storm_version}</version>
<scope>provided</scope>
<exclusions>
<exclusion>
<groupId>org.apache.logging.log4j</groupId>
<artifactId>log4j-api</artifactId>
</exclusion>
<exclusion>
<groupId>org.apache.logging.log4j</groupId>
<artifactId>log4j-core</artifactId>
</exclusion>
<exclusion>
<artifactId>servlet-api</artifactId>
<groupId>javax.servlet</groupId>
Expand Down
8 changes: 8 additions & 0 deletions metron-analytics/metron-profiler-common/pom.xml
Original file line number Diff line number Diff line change
Expand Up @@ -114,6 +114,14 @@
<version>${global_storm_version}</version>
<scope>provided</scope>
<exclusions>
<exclusion>
<groupId>org.apache.logging.log4j</groupId>
<artifactId>log4j-api</artifactId>
</exclusion>
<exclusion>
<groupId>org.apache.logging.log4j</groupId>
<artifactId>log4j-core</artifactId>
</exclusion>
<exclusion>
<artifactId>log4j-slf4j-impl</artifactId>
<groupId>org.apache.logging.log4j</groupId>
Expand Down
20 changes: 20 additions & 0 deletions metron-analytics/metron-profiler/pom.xml
Original file line number Diff line number Diff line change
Expand Up @@ -202,6 +202,14 @@
<artifactId>storm-core</artifactId>
<version>${global_storm_version}</version>
<exclusions>
<exclusion>
<groupId>org.apache.logging.log4j</groupId>
<artifactId>log4j-api</artifactId>
</exclusion>
<exclusion>
<groupId>org.apache.logging.log4j</groupId>
<artifactId>log4j-core</artifactId>
</exclusion>
<exclusion>
<artifactId>servlet-api</artifactId>
<groupId>javax.servlet</groupId>
Expand All @@ -221,6 +229,18 @@
</exclusions>
<scope>provided</scope>
</dependency>
<dependency>
<groupId>org.apache.logging.log4j</groupId>
<artifactId>log4j-api</artifactId>
<version>${global_log4j_core_version}</version>
<scope>test</scope>
</dependency>
<dependency>
<groupId>org.apache.logging.log4j</groupId>
<artifactId>log4j-core</artifactId>
<version>${global_log4j_core_version}</version>
<scope>test</scope>
</dependency>
<dependency>
<groupId>org.apache.kafka</groupId>
<artifactId>kafka_2.10</artifactId>
Expand Down
Original file line number Diff line number Diff line change
Expand Up @@ -458,7 +458,7 @@ Client

- Kibana:
* Set "kibana_es_url" to `http://<replace_with_elasticsearch_master_hostname>:9200`. "replace_with_elasticsearch_master_hostname" is the IP of the node where you assigned ElasticSearch Master on the Assign Master tab.
* Change kibana_default_application to "dashboard/Metron-Dashboard"
* Change kibana_default_application to "dashboard/AV-YpDmwdXwc6Ua9Muh9"
Copy link
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Is it possible to provide an easily identifiable name, or are we stuck with the "AV-..." ugliness?

Copy link
Contributor Author

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

They changed the links to point to index keys. I was bummed about this as well.


- Metron:
Set "Elasticsearch Hosts" to the IP of the node where you assigned ElasticSearch Master on the Assign Master tab.
Expand Down
209 changes: 209 additions & 0 deletions metron-deployment/packaging/ambari/README.md
Original file line number Diff line number Diff line change
Expand Up @@ -27,6 +27,7 @@ limitations under the License.
* [Configuration involving dependency services](#configuration-involving-dependency-services)
* [Kerberos](#kerberos)
* [Best practices](#best-practices)
* [Upgrading MPack Services](#upgrading-mpack-services)

## Overview
Typically, Ambari Management Pack development will be done in the Vagrant environments. These instructions are specific to Vagrant, but can be adapted for other environemnts (e.g. make sure to be on the correct nodes for server vs agent files)
Expand Down Expand Up @@ -464,3 +465,211 @@ This is checked in the indexing master
* Make sure to `kinit` as the correct user for setting up ACLs in a secured cluster. This is usually kafka for Kafka and hbase for HBase.
* See `set_hbase_acls` in `METRON.CURRENT/package/scripts/enrichment_commands.py` for an HBase example
* See `init_kafka_acls` in `METRON.CURRENT/package/scripts/enrichment_commands.py` and `METRON.CURRENT/package/scripts/metron_service.py` for an Kafka example

## Upgrading MPack Services

Apache Metron currently provides three services as part of its MPack
* Elasticsearch
* Kibana
* Metron

There is currently no mechanism provided for multi-version or backwards compatibility. If you upgrade a service, e.g. Elasticsearch 2.x to 5.x, that is the only version that will be
supported by Ambari via MPack.

The main steps for upgrading a service are split into add-on and common services for each service within the MPack as follows:
* Update the common services
* Change the service directory to use the new product version number
* Update metainfo.xml
* Update the add-on services
* Change the service directory to use the new product version number
* Update repoinfo.xml
* Update metainfo.xml
* Update mpack.json

### Update Elasticsearch

#### Update Common Services

1. Change service directory names for Elasticsearch to the new desired version

```
metron/metron-deployment/packaging/ambari/metron-mpack/src/main/resources/common-services/ELASTICSEARCH/${YOUR_VERSION_NUMBER_HERE}
```

e.g.

```
metron/metron-deployment/packaging/ambari/metron-mpack/src/main/resources/common-services/ELASTICSEARCH/5.6.2
```

1. Update metainfo.xml

Change the version number and package name in `metron/metron-deployment/packaging/ambari/metron-mpack/src/main/resources/common-services/ELASTICSEARCH/${YOUR_VERSION_NUMBER_HERE}/metainfo.xml`, e.g.

```
<version>5.6.2</version>
...
<osSpecifics>
<osSpecific>
<osFamily>any</osFamily>
<packages>
<package>
<name>elasticsearch-5.6.2</name>
</package>
</packages>
</osSpecific>
</osSpecifics>
```

#### Update Add-on Services

1. Change service directory names for Elasticsearch to the new desired version

```
metron/metron-deployment/packaging/ambari/metron-mpack/src/main/resources/addon-services/ELASTICSEARCH/${YOUR_VERSION_NUMBER_HERE}
```

e.g.

```
metron/metron-deployment/packaging/ambari/metron-mpack/src/main/resources/addon-services/ELASTICSEARCH/5.6.2
```

1. Update repoinfo.xml

See [https://www.elastic.co/guide/en/elasticsearch/reference/current/rpm.html](https://www.elastic.co/guide/en/elasticsearch/reference/current/rpm.html) for the latest info.

Modify the baseurl and repoid in `metron/metron-deployment/packaging/ambari/metron-mpack/src/main/resources/addon-services/ELASTICSEARCH/${YOUR_VERSION_NUMBER_HERE}/repos/repoinfo.xml`, e.g.

```
<baseurl>https://artifacts.elastic.co/packages/5.x/yum</baseurl>
<repoid>elasticsearch-5.x</repoid>
<reponame>ELASTICSEARCH</reponame>
```

1. Update metainfo.xml

Change the version number in `metron/metron-deployment/packaging/ambari/metron-mpack/src/main/resources/addon-services/ELASTICSEARCH/${YOUR_VERSION_NUMBER_HERE}/metainfo.xml`.
Also make sure to update the "extends" version to point to the updated common-services version, e.g.

```
<name>ELASTICSEARCH</name>
<version>5.6.2</version>
<extends>common-services/ELASTICSEARCH/5.6.2</extends>
```

#### Update mpack.json

1. Update the corresponding service_version in the service_versions_map, e.g.

```
...
"service_versions_map": [
{
"service_name" : "ELASTICSEARCH",
"service_version" : "5.6.2",
"applicable_stacks" : [
...
]
},
...
]
...
```

### Kibana

**Note:** Curator is included with the Kibana service

#### Update Common Services

1. Change service directory names for Kibana to the new desired version

```
metron/metron-deployment/packaging/ambari/metron-mpack/src/main/resources/common-services/KIBANA/${YOUR_VERSION_NUMBER_HERE}
```

e.g.

```
metron/metron-deployment/packaging/ambari/metron-mpack/src/main/resources/common-services/KIBANA/5.6.2
```

1. Update metainfo.xml

Change the version number and package name in `metron/metron-deployment/packaging/ambari/metron-mpack/src/main/resources/common-services/KIBANA/${YOUR_VERSION_NUMBER_HERE}/metainfo.xml`, e.g.

```
<version>5.6.2</version>
...
<packages>
...
<package>
<name>kibana-5.6.2</name>
</package>
</packages>
```

#### Update Add-on Services

1. Change service directory names for Kibana to the new desired version

```
metron/metron-deployment/packaging/ambari/metron-mpack/src/main/resources/addon-services/KIBANA/${YOUR_VERSION_NUMBER_HERE}
```

e.g.

```
metron/metron-deployment/packaging/ambari/metron-mpack/src/main/resources/addon-services/KIBANA/5.6.2
```

1. Update repoinfo.xml

**Note:** for Curator, there is a different repo for rhel 6 vs rhel 7

See the following links for current repo information for Kibana and Curator.
* [https://www.elastic.co/guide/en/kibana/current/rpm.html](https://www.elastic.co/guide/en/kibana/current/rpm.html)
* [https://www.elastic.co/guide/en/elasticsearch/client/curator/current/yum-repository.html](https://www.elastic.co/guide/en/elasticsearch/client/curator/current/yum-repository.html)

Modify the baseurl's and repoid's in `metron/metron-deployment/packaging/ambari/metron-mpack/src/main/resources/addon-services/KIBANA/${YOUR_VERSION_NUMBER_HERE}/repos/repoinfo.xml`, e.g.

```
<baseurl>https://artifacts.elastic.co/packages/5.x/yum</baseurl>
<repoid>kibana-5.x</repoid>
<reponame>KIBANA</reponame>
...
<baseurl>http://packages.elastic.co/curator/5/centos/6</baseurl>
<repoid>ES-Curator-5.x</repoid>
<reponame>CURATOR</reponame>
```

1. Update metainfo.xml

Change the version number in `metron/metron-deployment/packaging/ambari/metron-mpack/src/main/resources/addon-services/KIBANA/${YOUR_VERSION_NUMBER_HERE}/metainfo.xml`.
Also make sure to update the "extends" version to point to the updated common-services version, e.g.
```
<name>KIBANA</name>
<version>5.6.2</version>
<extends>common-services/KIBANA/5.6.2</extends>
```

#### Update mpack.json

1. Update the corresponding service_version in the service_versions_map, e.g.

```
...
"service_versions_map": [
{
"service_name" : "KIBANA",
"service_version" : "5.6.2",
"applicable_stacks" : [
...
]
},
...
]
...
```

Loading