Details
-
Improvement
-
Status: To Do
-
Major
-
Resolution: Unresolved
-
None
-
None
-
None
Description
Right now, the demo system ( bro, snort, yaf ) are part of the default installation, and the default configurations required for those systems ( ES, Enrichment ) are in the main code base. For example bro's default enrichment is the enrichment that assumes the demo setup.
This is not really correct. The demo system should be a separately installable feature of metron, and it's configurations should be managed outside the defaults for the parsers etc.
This would allow separate development of the demo without affecting others.
Either checkbox or a separate ambari service?
What should the default enrichment be?
How to have vagrant install the service