Creating Runbooks Using Apache Zeppelin
Apache Zeppelin is a web-based notebook that supports interactive data exploration, visualization, sharing and collaboration.
HCP users will use Zeppelin at two levels:
-
Senior analysts and data scientists can use Zeppelin to produce notebooks to analyze data and to create recreatable investigations or runbooks for junior analysts.
-
Junior analysts can use recreatable investigations or runbooks in Zeppelin to discover cybersecurity issues much like they do with the Metron Dashboard. However, Zeppelin can handle larger groups of data.