Homework

From Sixsigma
Jump to: navigation, search

This homework project is for John to develop a network monitoring capability under the tutelage of his Sensei, Jedd.

Messages from Jedd

Component summary

Software Note Function
Prometheus
Loki by the Grafana guys
Grafana
Elasticsearch
metricbeat
Graylog
Zabbix
PostgreSQL say with TimescaleDB
Logstash
Kibana
NetFlow (elastiflow)
NetData

Further reading

Buzzwords

Terms Jedd is liable to drop on you:

Term Meaning
APM Application Performance Monitoring
SIEM Security Information and Event Management

TODO

Do all this in your test environment so you don't need to worry about firewalls and user auth:

  1. knowledge-test: see instructions from Jedd.
  2. gandalf: Spin up a VM for logging - install graylog as per instructions. Point some rsyslog stuff towards it. Review the tutorials.
  3. ripley: Spin up a VM with Prometheus and Grafana - install node-exporter on one of your other boxes, and point that towards your Prometheus server.
  4. faith: Spin up a VM for Elasticsearch + Logstash + Kibana and set up Metricbeat on one of your other boxes, and point that towards your Elasticsearch server.

Virtual machines

gandalf-test

These notes are obsolete, see knowledge-test instead.

Setting Value
Sysid 141
System sm-log-1
Host gandalf-test
Deployment test
Provider vbox
Salt ID 141-sm-log-1-gandalf-test-vbox
Machine Folder /srv/vbox/fast
Type Linux
Version Ubuntu (64-bit)
Memory Size 3072 MB
Processor(s) 2 CUPs
Root Volume Size 30 GB
Root Volume Path /srv/vbox/fast/gandalf-test/gandalf-test.vdi
LVM PV 1 Size 500 GB
LVM PV 1 Path /srv/vbox/slow/gandalf-test/gandalf-test-pv-1-500.vdi
Attached to Bridged Adapter
Ethernet Adapter enp3s0f0
IP Address 10.1.3.141/16
Gateway 10.1.1.1
DNS 10.1.1.113

knowledge-test

Box: single box: 2 core, 6GB RAM, 100GB disk

Setting Value
Sysid 141
System sm-log-1
Host knowledge-test
Deployment test
Provider vbox
Salt ID 141-sm-log-1-knowledge-test-vbox
Machine Folder /srv/vbox/fast
Type Linux
Version Ubuntu (64-bit)
Memory Size 6 GB
Processor(s) 2 CUPs
Root Volume Size 100 GB
Root Volume Path /srv/vbox/fast/knowledge-test/knowledge-test.vdi
Attached to Bridged Adapter
Ethernet Adapter enp3s0f0
IP Address 10.1.3.141/16
Gateway 10.1.1.1
DNS 10.1.1.113