mirror of
				https://github.com/telekom-security/tpotce.git
				synced 2025-10-31 04:22:52 +00:00 
			
		
		
		
	 234fb16394
			
		
	
	
		234fb16394
		
	
	
	
	
		
			
			where possible kibana visualizations are converted to lens objects (more than 100 objects) all dashboards have been updated fixes #1392 for leaving SentryPeer log tag out add wordpot dashboard after discussion (#1486) and testing iptables-legacy is no longer required include all kibana objects for installation cleaning up some service scripts
		
			
				
	
	
		
			48 lines
		
	
	
	
		
			1.2 KiB
		
	
	
	
		
			Bash
		
	
	
		
			Executable file
		
	
	
	
	
			
		
		
	
	
			48 lines
		
	
	
	
		
			1.2 KiB
		
	
	
	
		
			Bash
		
	
	
		
			Executable file
		
	
	
	
	
| #!/bin/bash
 | |
| 
 | |
| if [ "$1" == "" ] || [ "$1" != "all" ] && [ "$1" != "base" ];
 | |
|   then
 | |
|     echo "Usage: backup_es_folders [all, base]"
 | |
|     echo "       all  = backup all ES folder"
 | |
|     echo "       base = backup only Kibana index".
 | |
|     echo
 | |
|     exit
 | |
| fi
 | |
| 
 | |
| # Backup all ES relevant folders
 | |
| # Make sure ES is available
 | |
| myES="http://127.0.0.1:64298/"
 | |
| myESSTATUS=$(curl -s -XGET ''$myES'_cluster/health' | jq '.' | grep -c green)
 | |
| if ! [ "$myESSTATUS" = "1" ]
 | |
|   then
 | |
|     echo "### Elasticsearch is not available."
 | |
|     exit
 | |
|   else
 | |
|     echo "### Elasticsearch is available, now continuing."
 | |
|     echo
 | |
| fi
 | |
| 
 | |
| # Set vars
 | |
| myDATE=$(date +%Y%m%d%H%M)
 | |
| myPATH=$PWD
 | |
| myELKPATH="data/elk/data"
 | |
| myKIBANAINDEXNAMES=$(curl -s -XGET ''$myES'_cat/indices/.kibana_*?v&s=index&h=uuid' | tail -n +2)
 | |
| #echo $myKIBANAINDEXNAMES
 | |
| for i in $myKIBANAINDEXNAMES;
 | |
|   do
 | |
|     myKIBANAINDEXPATHS="$myKIBANAINDEXPATHS $myELKPATH/indices/$i"
 | |
| done
 | |
| 
 | |
| # Backup DB in 2 flavors
 | |
| cd $HOME/tpotce
 | |
| 
 | |
| echo "### Now backing up Elasticsearch folders ..."
 | |
| if [ "$1" == "all" ];
 | |
|   then
 | |
|     tar cvfz $myPATH"/elkall_"$myDATE".tgz" $myELKPATH
 | |
| elif [ "$1" == "base" ];
 | |
|   then
 | |
|     tar cvfz $myPATH"/elkbase_"$myDATE".tgz" $myKIBANAINDEXPATHS
 | |
| fi
 | |
| 
 | |
| cd $myPATH
 |