설치할 플러그인 리스트

 : Active scanner rules (alpha)

 : Active scanner rules (beta)

 : Advanced SQLInjection Scanner

 : Port Scanner


1.


2.


3.


4.


5.


'Open Source > Security Onion' 카테고리의 다른 글

security onion 설치  (0) 2018.07.24


1.

 : https://github.com/Security-Onion-Solutions/security-onion/blob/master/Verify_ISO.md


'Open Source > Security Onion' 카테고리의 다른 글

플러그인 설치  (0) 2018.07.25


사전 요구 사항

 : jre 혹은 jdk 설치 필요


1.

 : https://github.com/zaproxy/zaproxy/wiki/Downloads


2.


3.


4.


5.


6.


7.


8.


9.


10.



아래와 같은 에러 발생 시
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
>>> import matplotlib.pyplot as plt
Traceback (most recent call last):
  File "<stdin>", line 1, in <module>
  File "/usr/local/lib/python2.7/dist-packages/matplotlib/pyplot.py", line 115, in <module>
    _backend_mod, new_figure_manager, draw_if_interactive, _show = pylab_setup()
  File "/usr/local/lib/python2.7/dist-packages/matplotlib/backends/__init__.py", line 62, in pylab_setup
    [backend_name], 0)
  File "/usr/local/lib/python2.7/dist-packages/matplotlib/backends/backend_tkagg.py", line 4, in <module>
    from . import tkagg  # Paint image to Tk photo blitter extension.
  File "/usr/local/lib/python2.7/dist-packages/matplotlib/backends/tkagg.py", line 5, in <module>
    from six.moves import tkinter as Tk
  File "/usr/lib/python2.7/dist-packages/six.py", line 203, in load_module
    mod = mod._resolve()
  File "/usr/lib/python2.7/dist-packages/six.py", line 115, in _resolve
    return _import_module(self.mod)
  File "/usr/lib/python2.7/dist-packages/six.py", line 82, in _import_module
    __import__(name)
  File "/usr/lib/python2.7/lib-tk/Tkinter.py", line 42, in <module>
    raise ImportError, str(msg) + ', please install the python-tk package'
ImportError: No module named _tkinter, please install the python-tk package
 
cs

python-tk 패키지가 없어서 발생하는 오류로 설치를 진행합니다.
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
$ sudo apt-get -y install vsftpd
Reading package lists... Done
Building dependency tree
Reading state information... Done
The following NEW packages will be installed:
  vsftpd
0 upgraded, 1 newly installed, 0 to remove and 13 not upgraded.
Need to get 115 kB of archives.
After this operation, 336 kB of additional disk space will be used.
Get:1 http://kr.archive.ubuntu.com/ubuntu xenial/main amd64 vsftpd amd64 3.0.3-3                                     ubuntu2 [115 kB]
Fetched 115 kB in 0s (301 kB/s)
Preconfiguring packages ...
Selecting previously unselected package vsftpd.
(Reading database ... 198798 files and directories currently installed.)
Preparing to unpack .../vsftpd_3.0.3-3ubuntu2_amd64.deb ...
Unpacking vsftpd (3.0.3-3ubuntu2) ...
Processing triggers for systemd (229-4ubuntu21.2) ...
Processing triggers for ureadahead (0.100.0-19) ...
Processing triggers for man-db (2.7.5-1) ...
Setting up vsftpd (3.0.3-3ubuntu2) ...
Processing triggers for systemd (229-4ubuntu21.2) ...
Processing triggers for ureadahead (0.100.0-19) ...
rabbit@rabbit-virtual-machine:~$ sudo service vsftpd start
rabbit@rabbit-virtual-machine:~$ vi /etc/vsftpd.conf
rabbit@rabbit-virtual-machine:~$ sudo vi /etc/vsftpd.conf
rabbit@rabbit-virtual-machine:~$ sudo vi /etc/vsftpd.conf
rabbit@rabbit-virtual-machine:~$ sudo service vsftpd restart
rabbit@rabbit-virtual-machine:~$ sudo apt-get -y install python-tk
Reading package lists... Done
Building dependency tree
Reading state information... Done
The following additional packages will be installed:
  blt tk8.6-blt2.5
Suggested packages:
  blt-demo tix python-tk-dbg
The following NEW packages will be installed:
  blt python-tk tk8.6-blt2.5
0 upgraded, 3 newly installed, 0 to remove and 13 not upgraded.
Need to get 605 kB of archives.
After this operation, 2,123 kB of additional disk space will be used.
Get:1 http://kr.archive.ubuntu.com/ubuntu xenial/main amd64 tk8.6-blt2.5 amd64 2                                     .5.3+dfsg-3 [574 kB]
Get:2 http://kr.archive.ubuntu.com/ubuntu xenial/main amd64 blt amd64 2.5.3+dfsg                                     -3 [4,852 B]
Get:3 http://kr.archive.ubuntu.com/ubuntu xenial-updates/main amd64 python-tk am                                     d64 2.7.12-1~16.04 [26.3 kB]
Fetched 605 kB in 0s (1,895 kB/s)
Selecting previously unselected package tk8.6-blt2.5.
(Reading database ... 198855 files and directories currently installed.)
Preparing to unpack .../tk8.6-blt2.5_2.5.3+dfsg-3_amd64.deb ...
Unpacking tk8.6-blt2.5 (2.5.3+dfsg-3) ...
Selecting previously unselected package blt.
Preparing to unpack .../blt_2.5.3+dfsg-3_amd64.deb ...
Unpacking blt (2.5.3+dfsg-3) ...
Selecting previously unselected package python-tk.
Preparing to unpack .../python-tk_2.7.12-1~16.04_amd64.deb ...
Unpacking python-tk (2.7.12-1~16.04) ...
Processing triggers for libc-bin (2.23-0ubuntu10) ...
Setting up tk8.6-blt2.5 (2.5.3+dfsg-3) ...
Setting up blt (2.5.3+dfsg-3) ...
Setting up python-tk (2.7.12-1~16.04) ...
Processing triggers for libc-bin (2.23-0ubuntu10) ...
 
cs


설치 후 다시 임포트를 진행합니다.

1
2
3
>>> import matplotlib.pyplot as plt
>>>
 
cs



tensorflow 라이브러리 사용 시 다음과 같은 에러 발생 시

1
2
3
4
5
6
7
8
9
10
>>> with tf.Session() as session:
...     merged = tf.merge_all_summaries()
...     writer = tf.train.SummaryWriter("/tmp/tensorflowlogs",session.graph)
...     session.run(model)
...     print(session.run(y))
...
Traceback (most recent call last):
  File "<stdin>", line 2, in <module>
AttributeError: 'module' object has no attribute 'merge_all_summaries'
 
cs

해당 속성이 없으므로 사용할 수 없다는 에러인데 TF 버전에 따라 해당 API 및 일부 API가 변경되었기 때문에 다음과 같이 사용합니다.

 : tf.audio_summary -> tf.summary.audio
 : tf.contrib.deprecated.histogram_summary -> tf.summary.histogram
 : tf.contrib.deprecated.scalar_summary -> `tf.summary.scalar
 : tf.histogram_summary -> tf.summary.histogram
 : tf.image_summary -> tf.summary.image
 : tf.merge_all_summaries -> tf.summary.merge_all
 : tf.merge_summary -> tf.summary.merge
 : tf.scalar_summary -> tf.summary.scalar
 : tf.train.SummaryWriter -> tf.summary.FileWriter



tensorflow 라이브러리 사용 시 다음과 같은 에러 발생 시

1
2
3
4
5
>>> y = tf.mul(a, b)
Traceback (most recent call last):
  File "<stdin>", line 1, in <module>
AttributeError: 'module' object has no attribute 'mul'
 
cs


해당 속성이 없으므로 사용할 수 없다는 에러인데 TF 버전에 따라 해당 API 및 일부 API가 변경되었기 때문에 다음과 같이 사용합니다.

 : tf.mul -> tf.multiply

 : tf.sub -> tf.subtract

 : tf.neg -> tf.negative



1. https://www.elastic.co/kr/downloads/elasticsearch


2. 압축 해제 후


3. 해당 폴더의 빈 공간에 "Shift + 우클릭"하여 "여기서 명령 창 열기" 혹은 "여기에 PowerShell 창 열기"를 선택합니다.


4.

1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
PS C:\elasticsearch-6.3.0\elasticsearch-6.3.0\bin> .\elasticsearch
[2018-07-05T13:09:33,162][INFO ][o.e.n.Node               ] [] initializing ...
[2018-07-05T13:09:33,232][INFO ][o.e.e.NodeEnvironment    ] [_dQxEAG] using [1] data paths, mounts [[(C:)]], net usable_space [463.2gb], net total_space [930.1gb], types [NTFS]
[2018-07-05T13:09:33,232][INFO ][o.e.e.NodeEnvironment    ] [_dQxEAG] heap size [989.8mb], compressed ordinary object pointers [true]
[2018-07-05T13:09:33,238][INFO ][o.e.n.Node               ] [_dQxEAG] node name derived from node ID [_dQxEAGURO6gbD4nbCYUVA]; set [node.name] to override
[2018-07-05T13:09:33,238][INFO ][o.e.n.Node               ] [_dQxEAG] version[6.3.0], pid[7084], build[default/zip/424e937/2018-06-11T23:38:03.357887Z], OS[Windows 10/10.0/amd64], JVM[Oracle Corporation/Java HotSpot(TM) 64-Bit Server VM/1.8.0_101/25.101-b13]
[2018-07-05T13:09:33,239][INFO ][o.e.n.Node               ] [_dQxEAG] JVM arguments [-Xms1g, -Xmx1g, -XX:+UseConcMarkSweepGC, -XX:CMSInitiatingOccupancyFraction=75, -XX:+UseCMSInitiatingOccupancyOnly, -XX:+AlwaysPreTouch, -Xss1m, -Djava.awt.headless=true, -Dfile.encoding=UTF-8, -Djna.nosys=true, -XX:-OmitStackTraceInFastThrow, -Dio.netty.noUnsafe=true, -Dio.netty.noKeySetOptimization=true, -Dio.netty.recycler.maxCapacityPerThread=0, -Dlog4j.shutdownHookEnabled=false, -Dlog4j2.disable.jmx=true, -Djava.io.tmpdir=C:\Users\Admin\AppData\Local\Temp\elasticsearch, -XX:+HeapDumpOnOutOfMemoryError, -XX:HeapDumpPath=data, -XX:ErrorFile=logs/hs_err_pid%p.log, -XX:+PrintGCDetails, -XX:+PrintGCDateStamps, -XX:+PrintTenuringDistribution, -XX:+PrintGCApplicationStoppedTime, -Xloggc:logs/gc.log, -XX:+UseGCLogFileRotation, -XX:NumberOfGCLogFiles=32, -XX:GCLogFileSize=64m, -Delasticsearch, -Des.path.home=C:\elasticsearch-6.3.0\elasticsearch-6.3.0, -Des.path.conf=C:\elasticsearch-6.3.0\elasticsearch-6.3.0\config, -Des.distribution.flavor=default, -Des.distribution.type=zip]
[2018-07-05T13:09:35,533][INFO ][o.e.p.PluginsService     ] [_dQxEAG] loaded module [aggs-matrix-stats]
[2018-07-05T13:09:35,534][INFO ][o.e.p.PluginsService     ] [_dQxEAG] loaded module [analysis-common]
[2018-07-05T13:09:35,534][INFO ][o.e.p.PluginsService     ] [_dQxEAG] loaded module [ingest-common]
[2018-07-05T13:09:35,534][INFO ][o.e.p.PluginsService     ] [_dQxEAG] loaded module [lang-expression]
[2018-07-05T13:09:35,534][INFO ][o.e.p.PluginsService     ] [_dQxEAG] loaded module [lang-mustache]
[2018-07-05T13:09:35,535][INFO ][o.e.p.PluginsService     ] [_dQxEAG] loaded module [lang-painless]
[2018-07-05T13:09:35,535][INFO ][o.e.p.PluginsService     ] [_dQxEAG] loaded module [mapper-extras]
[2018-07-05T13:09:35,535][INFO ][o.e.p.PluginsService     ] [_dQxEAG] loaded module [parent-join]
[2018-07-05T13:09:35,535][INFO ][o.e.p.PluginsService     ] [_dQxEAG] loaded module [percolator]
[2018-07-05T13:09:35,535][INFO ][o.e.p.PluginsService     ] [_dQxEAG] loaded module [rank-eval]
[2018-07-05T13:09:35,536][INFO ][o.e.p.PluginsService     ] [_dQxEAG] loaded module [reindex]
[2018-07-05T13:09:35,536][INFO ][o.e.p.PluginsService     ] [_dQxEAG] loaded module [repository-url]
[2018-07-05T13:09:35,536][INFO ][o.e.p.PluginsService     ] [_dQxEAG] loaded module [transport-netty4]
[2018-07-05T13:09:35,536][INFO ][o.e.p.PluginsService     ] [_dQxEAG] loaded module [tribe]
[2018-07-05T13:09:35,536][INFO ][o.e.p.PluginsService     ] [_dQxEAG] loaded module [x-pack-core]
[2018-07-05T13:09:35,538][INFO ][o.e.p.PluginsService     ] [_dQxEAG] loaded module [x-pack-deprecation]
[2018-07-05T13:09:35,539][INFO ][o.e.p.PluginsService     ] [_dQxEAG] loaded module [x-pack-graph]
[2018-07-05T13:09:35,540][INFO ][o.e.p.PluginsService     ] [_dQxEAG] loaded module [x-pack-logstash]
[2018-07-05T13:09:35,541][INFO ][o.e.p.PluginsService     ] [_dQxEAG] loaded module [x-pack-ml]
[2018-07-05T13:09:35,542][INFO ][o.e.p.PluginsService     ] [_dQxEAG] loaded module [x-pack-monitoring]
[2018-07-05T13:09:35,543][INFO ][o.e.p.PluginsService     ] [_dQxEAG] loaded module [x-pack-rollup]
[2018-07-05T13:09:35,549][INFO ][o.e.p.PluginsService     ] [_dQxEAG] loaded module [x-pack-security]
[2018-07-05T13:09:35,550][INFO ][o.e.p.PluginsService     ] [_dQxEAG] loaded module [x-pack-sql]
[2018-07-05T13:09:35,551][INFO ][o.e.p.PluginsService     ] [_dQxEAG] loaded module [x-pack-upgrade]
[2018-07-05T13:09:35,552][INFO ][o.e.p.PluginsService     ] [_dQxEAG] loaded module [x-pack-watcher]
[2018-07-05T13:09:35,553][INFO ][o.e.p.PluginsService     ] [_dQxEAG] no plugins loaded
[2018-07-05T13:09:39,882][INFO ][o.e.x.s.a.s.FileRolesStore] [_dQxEAG] parsed [0] roles from file [C:\elasticsearch-6.3.0\elasticsearch-6.3.0\config\roles.yml]
[2018-07-05T13:09:40,439][INFO ][o.e.x.m.j.p.l.CppLogMessageHandler] [controller/22068] [Main.cc@109] controller (64 bit): Version 6.3.0 (Build 0f0a34c67965d7) Copyright (c) 2018 Elasticsearch BV
[2018-07-05T13:09:40,739][DEBUG][o.e.a.ActionModule       ] Using REST wrapper from plugin org.elasticsearch.xpack.security.Security
[2018-07-05T13:09:40,980][INFO ][o.e.d.DiscoveryModule    ] [_dQxEAG] using discovery type [zen]
[2018-07-05T13:09:41,726][INFO ][o.e.n.Node               ] [_dQxEAG] initialized
[2018-07-05T13:09:41,726][INFO ][o.e.n.Node               ] [_dQxEAG] starting ...
[2018-07-05T13:09:44,151][INFO ][o.e.t.TransportService   ] [_dQxEAG] publish_address {127.0.0.1:9300}, bound_addresses {127.0.0.1:9300}, {[::1]:9300}
[2018-07-05T13:09:47,228][INFO ][o.e.c.s.MasterService    ] [_dQxEAG] zen-disco-elected-as-master ([0] nodes joined)[, ], reason: new_master {_dQxEAG}{_dQxEAGURO6gbD4nbCYUVA}{NLBAt36xS-mMf0j_sKL9CA}{127.0.0.1}{127.0.0.1:9300}{ml.machine_memory=17087102976, xpack.installed=true, ml.max_open_jobs=20, ml.enabled=true}
[2018-07-05T13:09:47,234][INFO ][o.e.c.s.ClusterApplierService] [_dQxEAG] new_master {_dQxEAG}{_dQxEAGURO6gbD4nbCYUVA}{NLBAt36xS-mMf0j_sKL9CA}{127.0.0.1}{127.0.0.1:9300}{ml.machine_memory=17087102976, xpack.installed=true, ml.max_open_jobs=20, ml.enabled=true}, reason: apply cluster state (from master [master {_dQxEAG}{_dQxEAGURO6gbD4nbCYUVA}{NLBAt36xS-mMf0j_sKL9CA}{127.0.0.1}{127.0.0.1:9300}{ml.machine_memory=17087102976, xpack.installed=true, ml.max_open_jobs=20, ml.enabled=true} committed version [1] source [zen-disco-elected-as-master ([0] nodes joined)[, ]]])
[2018-07-05T13:09:47,532][WARN ][o.e.x.s.a.s.m.NativeRoleMappingStore] [_dQxEAG] Failed to clear cache for realms [[]]
[2018-07-05T13:09:47,560][INFO ][o.e.l.LicenseService     ] [_dQxEAG] license [b37d9cae-d9d3-471e-b94a-dee571e45476] mode [basic] - valid
[2018-07-05T13:09:47,582][INFO ][o.e.g.GatewayService     ] [_dQxEAG] recovered [0] indices into cluster_state
[2018-07-05T13:09:48,868][INFO ][o.e.x.s.t.n.SecurityNetty4HttpServerTransport] [_dQxEAG] publish_address {127.0.0.1:9200}, bound_addresses {127.0.0.1:9200}, {[::1]:9200}
[2018-07-05T13:09:48,869][INFO ][o.e.n.Node               ] [_dQxEAG] started
 
cs


5. 확인

 : http://localhost:9200



* 아래와 같은 에러 발생 시

1
2
3
4
5
{
  "error" : "Content-Type header [application/x-www-form-urlencoded] is not supported",
  "status" : 406
}
 
cs



* curl 명령어에 옵션을 다음과 같이 추가하여 실행합니다.

1
2
-H 'Content-Type: application/json'
 
cs


 : 추가 전

1
2
3
4
5
6
7
8
9
10
$ curl -XPUT master:9200/customer/external/1?pretty -d'
> {
>   "name": "John Doe"
> }
> '
{
  "error" : "Content-Type header [application/x-www-form-urlencoded] is not supported",
  "status" : 406
}
 
cs


 : 추가 후

1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
$ curl -XPUT master:9200/customer/external/1?pretty -H'Content-Type: application/json' -d'
> {
>   "name": "John Doe"
> }
> '
{
  "_index" : "customer",
  "_type" : "external",
  "_id" : "1",
  "_version" : 1,
  "result" : "created",
  "_shards" : {
    "total" : 2,
    "successful" : 2,
    "failed" : 0
  },
  "_seq_no" : 0,
  "_primary_term" : 1
}
 
cs



* Elasticsearch 6.0 이후 버전에 도입된 엄격한 content-type 확인으로 인해서 추가해야 합니다.




* 아래와 같은 에러 발생 시

1
2
3
ERROR: [1] bootstrap checks failed
[1]: max virtual memory areas vm.max_map_count [65530] is too low, increase to at least [262144]
 
cs



* 다음과 같이 조치를 취합니다.

1. sysctl.conf

 1-1. sysctl.conf 편집

1
2
$ sudo vi /etc/sysctl.conf
 
cs


 1-2. 내용 추가

1
2
vm.max_map_count=262144
 
cs


 1-3. 확인

1
2
$ sudo sysctl -p
 
cs




* 사전 요구 사항

 > jdk

 > above 2node


* Single Cluster와 설치가 동일하므로 아래 링크를 참고하세요.

 : Elasticsearch 1.6.0 Single Cluster 설치 및 환경 구축



하나의 노드에 설치 및 환경 구축이 끝났다는 가정하에 진행합니다.

1. elasticsearch 디렉터리를 압축

1
2
$ sudo tar -cvzf ./elasticsearch-1.6.0.tar.gz ./elasticsearch-1.6.0
 
cs



2. 압축 파일에 소유 권한 부여

1
2
$ sudo chown -R hadoop-user:hadoop ./elasticsearch-1.6.0.tar.gz
 
cs



3. 클러스터링 된 노드에 압축 파일을 배포

1
2
3
$ scp ./elasticsearch-1.6.0.tar.gz hadoop-user@secondary:~/
elasticsearch-1.6.0.tar.gz                                                         100%   27MB  27.1MB/s   00:00
 
cs

* 해당하는 노드의 수만큼 배포를 진행합니다.

* 위 과정을 진행하려면 아래와 같은 작업이 사전에 요구됩니다.

 : ssh 공개 키 생성 및 분배



4. elasticsearch.yml 설정 파일

 4-1. elasticsearch.yml 편집

  : vi /usr/local/elasticsearch/config/elasticsearch.yml

1
2
$ vi ./config/elasticsearch.yml
 
cs


 4-2. 다음과 같이 cluster.name 부분을 주석 해제하고 이름을 지정합니다.

  : 편집 전

1
2
3
4
5
6
7
################################### Cluster ###################################
 
# Cluster name identifies your cluster for auto-discovery. If you're running
# multiple clusters on the same network, make sure you're using unique names.
#
#cluster.name: elasticsearch
 
cs


  : 편집 후

1
2
3
4
5
6
7
################################### Cluster ###################################
 
# Cluster name identifies your cluster for auto-discovery. If you're running
# multiple clusters on the same network, make sure you're using unique names.
#
cluster.name: elasticsearch
 
cs



5. elasticsearch를 실행합니다.

 : master

1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
$ ./bin/elasticsearch &
[1] 22886
[2018-02-13 10:43:41,405][INFO ][node                     ] [Pietro Maximoff] version[1.6.0], pid[22886], build[cdd3ac4/2015-06-09T13:36:34Z]
[2018-02-13 10:43:41,405][INFO ][node                     ] [Pietro Maximoff] initializing ...
[2018-02-13 10:43:41,409][INFO ][plugins                  ] [Pietro Maximoff] loaded [], sites []
[2018-02-13 10:43:41,451][INFO ][env                      ] [Pietro Maximoff] using [1] data paths, mounts [[/ (/dev/mapper/master--vg-root)]], net usable_space [577.3gb], net total_space [686.4gb], types [ext4]
[2018-02-13 10:43:43,599][INFO ][node                     ] [Pietro Maximoff] initialized
[2018-02-13 10:43:43,599][INFO ][node                     ] [Pietro Maximoff] starting ...
[2018-02-13 10:43:43,725][INFO ][transport                ] [Pietro Maximoff] bound_address {inet[/0.0.0.0:9300]}, publish_address {inet[/192.168.10.30:9300]}
[2018-02-13 10:43:43,741][INFO ][discovery                ] [Pietro Maximoff] elasticsearch/toriea8LS1CQ8hVPLA-5GQ
[2018-02-13 10:43:47,520][INFO ][cluster.service          ] [Pietro Maximoff] new_master [Pietro Maximoff][toriea8LS1CQ8hVPLA-5GQ][master][inet[/192.168.10.30:9300]], reason: zen-disco-join (elected_as_master)
[2018-02-13 10:43:47,547][INFO ][http                     ] [Pietro Maximoff] bound_address {inet[/0.0.0.0:9200]}, publish_address {inet[/192.168.10.30:9200]}
[2018-02-13 10:43:47,547][INFO ][node                     ] [Pietro Maximoff] started
[2018-02-13 10:43:47,602][INFO ][gateway                  ] [Pietro Maximoff] recovered [0] indices into cluster_state
 
cs


 : secondary

1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
$ ./bin/elasticsearch &
[1] 6831
[2018-02-13 10:45:23,936][INFO ][node                     ] [Titanium Man] version[1.6.0], pid[6831], build[cdd3ac4/2015-06-09T13:36:34Z]
[2018-02-13 10:45:23,936][INFO ][node                     ] [Titanium Man] initializing ...
[2018-02-13 10:45:23,940][INFO ][plugins                  ] [Titanium Man] loaded [], sites []
[2018-02-13 10:45:23,979][INFO ][env                      ] [Titanium Man] using [1] data paths, mounts [[/ (/dev/mapper/secondary--vg-root)]], net usable_space [643.3gb], net total_space [686.4gb], types [ext4]
[2018-02-13 10:45:26,099][INFO ][node                     ] [Titanium Man] initialized
[2018-02-13 10:45:26,099][INFO ][node                     ] [Titanium Man] starting ...
[2018-02-13 10:45:26,314][INFO ][transport                ] [Titanium Man] bound_address {inet[/0.0.0.0:9300]}, publish_address {inet[/192.168.10.24:9300]}
[2018-02-13 10:45:26,330][INFO ][discovery                ] [Titanium Man] elasticsearch/ZcXCBo3wQjWvuq_MvdKIYA
[2018-02-13 10:45:29,365][INFO ][cluster.service          ] [Pietro Maximoff] added {[Titanium Man][ZcXCBo3wQjWvuq_MvdKIYA][secondary][inet[/192.168.10.24:9300]],}, reason: zen-disco-receive(join from node[[Titanium Man][ZcXCBo3wQjWvuq_MvdKIYA][secondary][inet[/192.168.10.24:9300]]])
[2018-02-13 10:45:29,376][INFO ][cluster.service          ] [Titanium Man] detected_master [Pietro Maximoff][toriea8LS1CQ8hVPLA-5GQ][master][inet[/192.168.10.30:9300]], added {[Pietro Maximoff][toriea8LS1CQ8hVPLA-5GQ][master][inet[/192.168.10.30:9300]],}, reason: zen-disco-receive(from master [[Pietro Maximoff][toriea8LS1CQ8hVPLA-5GQ][master][inet[/192.168.10.30:9300]]])
[2018-02-13 10:45:29,453][INFO ][http                     ] [Titanium Man] bound_address {inet[/0.0.0.0:9200]}, publish_address {inet[/192.168.10.24:9200]}
[2018-02-13 10:45:29,453][INFO ][node                     ] [Titanium Man] started
 
cs

* 클러스터링 여부는 출력 로그의 cluster.service를 통해 확인할 수 있습니다.



+ Recent posts