Installing Alerts User Interface
The Alerts user interface lists alerts caused by any events that trigger your threat intelligence thresholds. These alerts are how you are notified that an event needs your attention.
You must install the Alerts user interface manually. To install and launch the Alerts user interface, complete the following steps:
Copy
incubator-metron/metron-interface/metron-alerts/target/metron-alerts-METRON_VERSION-archive.tar.gz
to the desired host.Untar the archive in the target directory.
The directory structure will look like:
bin start_alerts_ui.sh web alerts-ui package.json server.js web assets (html, css, js, ...)
Start the Alerts user interface by entering the following command:
./bin/start_alerts_ui.sh -p <$PORT_TO_RUN_ALERTS_UI> -r <$METRON_REST_URL>
For example:
./bin/start_alerts_ui.sh -p 4200 -r http://$METRON_HOST:8082
The script will generate output similar to the following:
Metron alerts ui is listening on http://127.0.0.1:4200 http://10.200.4.205:4200 http://192.168.66.1:4200 Show less
View the GUI at the following url:
http://$HOST_NAME:4200
The default credentials are
admin/password
.