This repository has been archived by the owner on Apr 16, 2021. It is now read-only.
-
Notifications
You must be signed in to change notification settings - Fork 521
InstallingOnUbuntu
karolisc edited this page May 18, 2015
·
35 revisions
If you want to quickly evaluate Security Onion on your preferred flavor of Ubuntu 12.04 32-bit/64-bit (not using our ISO image), follow these steps:
- First, check the Hardware Requirements page.
- Download the ISO image for your preferred flavor of Ubuntu 12.04.5, verify its checksum, and boot from it.
- Follow the prompts in the installer, but see the two notes below first.
- When prompted to
encrypt home folder
option, DO NOT enable this feature.
- When asked about automatic updates, DO NOT enable automatic updates.
- Reboot into your new installation.
- Login using the username/password you specified during installation.
- Verify that you have Internet connectivity. If necessary, configure your proxy settings.
- Log back in (using
ssh -X
if you’re installing on Ubuntu Server or a headless distro).
- Configure
MySQL
not to prompt for root password:
````
echo "debconf debconf/frontend select noninteractive" | sudo debconf-set-selections ````
- Clean apt list repository:
````
sudo rm -rf /var/lib/apt/lists/* sudo apt-get update ````
- Add the Security Onion stable repository:
````
sudo apt-get -y install python-software-properties sudo add-apt-repository -y ppa:securityonion/stable sudo apt-get update ````
- Install the securityonion-all metapackage:
````
sudo apt-get -y install securityonion-all ````
- Run the Setup wizard:
````
sudo sosetup ````
- Follow the prompts.
- Analyze alerts using the Sguil client, or open a browser to https://localhost where you can access
Squert
,Snorby
andELSA
.
- Follow the upgrade process.
Please review the PostInstallation page.
- Introduction
- Use Cases
- Hardware Requirements
- Release Notes
- Download/Install
- Booting Issues
- After Installation
- UTC and Time Zones
- Services
- VirtualBox Walkthrough
- VMWare Walkthrough
- Videos
- Architecture
- Cheat Sheet
- Conference
- Elastic Stack
- Elastic Architecture
- Elasticsearch
- Logstash
- Kibana
- ElastAlert
- Curator
- FreqServer
- DomainStats
- Docker
- Redis
- Data Fields
- Beats
- Pre-Releases
- ELSA to Elastic
- Network Configuration
- Proxy Configuration
- Firewall/Hardening
- Email Configuration
- Integrating with other systems
- Changing IP Addresses
- NTP
- Managing Alerts
- Managing Rules
- Adding Local Rules
- Disabling Processes
- Filtering with BPF
- Adjusting PF_RING for traffic
- MySQL Tuning
- Adding a new disk
- High Performance Tuning
- Trimming PCAPs