diff --git a/T-Pot,-RAM-and-Elastic-Stack.md b/T-Pot,-RAM-and-Elastic-Stack.md index 2da1a35..c19dee2 100644 --- a/T-Pot,-RAM-and-Elastic-Stack.md +++ b/T-Pot,-RAM-and-Elastic-Stack.md @@ -1,9 +1,9 @@ -With the latest Elastic Stack (7.16+) having 16GB of RAM for T-Pot is probably the best choice for all of the Elastic Tools to run and start up without any errors. -However, not every one has the option for 16GB of RAM. You can adjust `/opt/tpot/etc/tpot.yml` to limit the Elastic RAM usage. +With the latest Elastic Stack having 16GB of RAM for T-Pot is probably the best choice for all of the Elastic Tools to run and start up without any errors. +However, not everyone has the option for 16GB of RAM. You can adjust `$HOME/tpotce/docker-compose.yml` to limit the Elastic RAM usage. -It is assumed you make all the changes as root (`sudo su -`) +It is assumed you make all the changes as the user you installed T-Pot with... 1. Stop T-Pot (`sytemctl stop tpot`) -2. `vi /opt/tpot/etc/tpot.yml` +2. `vi $HOME/tpotce/docker-compose.yml` 3. Search for `Elasticsearch service` and adjust the following lines to your needs (uncommenting should be enough in most cases): ``` # - ES_JAVA_OPTS=-Xms2048m -Xmx2048m