Setup with Docker Compose

1. Install Docker Compose
2. Clone LogonTracer Github repository
3. Customize docker-compose.yml
4. Create Compose Network
5. Start Docker Compose 6. Accessing the Web GUI

If your LogonTracer has low performance with Docker images, use Docker Compose.

Install Docker Compose

If you do not have Docker Compose, please check this page and install it.

Clone LogonTracer github repository

$ git clone https://github.com/JPCERTCC/LogonTracer.git
$ cd LogonTracer\docker-compose

Customize docker-compose.yml

Modify docker-compose.yml if needed.

Set the IP Address of Server

If you use other than localhost, change to IP address etc.

environment:
  - LTHOSTNAME=localhost

Performance Tuning for Neo4j

Performance tuning of Neo4j (used memory size) may improve the performance of LogonTracer.

- NEO4J_dbms_memory_heap_max__size=4G
- NEO4J_dbms_memory_heap_initial__size=2G
- NEO4j_dbms_memory_pagecache_size=20G

See more details: Neo4j Web

Create Compose Network

$ docker network create neo4j-network

Start Docker Compose

$ docker compose build
$ docker compose up -d

It takes time to start Neo4j.

Accessing the Web GUI

Access http://[IP_Address]:8080/ via Web browser. Enable JavaScript on your browser.

Login

Login with the default account (neo4j:password) from the Web GUI.