mirror of
https://github.com/telekom-security/tpotce.git
synced 2025-04-28 19:28:50 +00:00
keep elkbase.tgz
In some rare occasions the .kibana index might be corrupted (IOException) resulting in missing translogs and thus preventing .kibana index from getting indexed (happens during a power failure). A quick fix is to delete the contents in “/data/elk/data/elasticsearch/nodes/0/indices/.kibana/*“, extract elkbase.tgz to a temp folder (tar xvfz elkbase.tgz /tmp/) and copy “cp -R /tmp/data/elk/data/elasticsearch/nodes/0/indices/.kibana/* /data/elk/data/elasticsearch/nodes/0/indices/.kibana/“. Make sure to stop service checks (“/etc/crontab”) and stop elk (service elk stop) before doing this.
This commit is contained in:
parent
f9e67c897c
commit
c7516ae1f8
1 changed files with 2 additions and 2 deletions
|
@ -306,8 +306,8 @@ chown tsec:tsec /root/tpot/home/*
|
|||
chmod 644 /root/tpot/data/upstart/*
|
||||
|
||||
# Let's copy some files
|
||||
tar xvfz /root/tpot/data/elkbase.tgz -C /
|
||||
rm /root/tpot/data/elkbase.tgz
|
||||
tar xvfz /root/tpot/data/elkbase.tgz -C /
|
||||
cp /root/tpot/data/elkbase.tgz /data/
|
||||
cp -R /root/tpot/bin/* /usr/bin/
|
||||
cp -R /root/tpot/data/* /data/
|
||||
cp -R /root/tpot/etc/issue /etc/
|
||||
|
|
Loading…
Reference in a new issue