mirror of
				https://github.com/telekom-security/tpotce.git
				synced 2025-11-03 05:52:52 +00:00 
			
		
		
		
	where possible kibana visualizations are converted to lens objects (more than 100 objects) all dashboards have been updated fixes #1392 for leaving SentryPeer log tag out add wordpot dashboard after discussion (#1486) and testing iptables-legacy is no longer required include all kibana objects for installation cleaning up some service scripts
		
			
				
	
	
		
			48 lines
		
	
	
	
		
			1.2 KiB
		
	
	
	
		
			Bash
		
	
	
		
			Executable file
		
	
	
	
	
			
		
		
	
	
			48 lines
		
	
	
	
		
			1.2 KiB
		
	
	
	
		
			Bash
		
	
	
		
			Executable file
		
	
	
	
	
#!/bin/bash
 | 
						|
 | 
						|
if [ "$1" == "" ] || [ "$1" != "all" ] && [ "$1" != "base" ];
 | 
						|
  then
 | 
						|
    echo "Usage: backup_es_folders [all, base]"
 | 
						|
    echo "       all  = backup all ES folder"
 | 
						|
    echo "       base = backup only Kibana index".
 | 
						|
    echo
 | 
						|
    exit
 | 
						|
fi
 | 
						|
 | 
						|
# Backup all ES relevant folders
 | 
						|
# Make sure ES is available
 | 
						|
myES="http://127.0.0.1:64298/"
 | 
						|
myESSTATUS=$(curl -s -XGET ''$myES'_cluster/health' | jq '.' | grep -c green)
 | 
						|
if ! [ "$myESSTATUS" = "1" ]
 | 
						|
  then
 | 
						|
    echo "### Elasticsearch is not available."
 | 
						|
    exit
 | 
						|
  else
 | 
						|
    echo "### Elasticsearch is available, now continuing."
 | 
						|
    echo
 | 
						|
fi
 | 
						|
 | 
						|
# Set vars
 | 
						|
myDATE=$(date +%Y%m%d%H%M)
 | 
						|
myPATH=$PWD
 | 
						|
myELKPATH="data/elk/data"
 | 
						|
myKIBANAINDEXNAMES=$(curl -s -XGET ''$myES'_cat/indices/.kibana_*?v&s=index&h=uuid' | tail -n +2)
 | 
						|
#echo $myKIBANAINDEXNAMES
 | 
						|
for i in $myKIBANAINDEXNAMES;
 | 
						|
  do
 | 
						|
    myKIBANAINDEXPATHS="$myKIBANAINDEXPATHS $myELKPATH/indices/$i"
 | 
						|
done
 | 
						|
 | 
						|
# Backup DB in 2 flavors
 | 
						|
cd $HOME/tpotce
 | 
						|
 | 
						|
echo "### Now backing up Elasticsearch folders ..."
 | 
						|
if [ "$1" == "all" ];
 | 
						|
  then
 | 
						|
    tar cvfz $myPATH"/elkall_"$myDATE".tgz" $myELKPATH
 | 
						|
elif [ "$1" == "base" ];
 | 
						|
  then
 | 
						|
    tar cvfz $myPATH"/elkbase_"$myDATE".tgz" $myKIBANAINDEXPATHS
 | 
						|
fi
 | 
						|
 | 
						|
cd $myPATH
 |