Start and Stop Enrichments

You might want to stop or start enrichments as you refine or focus your cybersecurity monitoring. You can easily stop and start enrichments by using Ambari.

1. Display the Ambari tool and navigate to Services > Metron > SUMMARY.

   
   
   

2. Click METRON ENRICHMENT to display the Components window.
   This window displays a list of CCP hosts and which components reside on each host.

   
   
   

3. In the Action column, click … by Metron Enrichment/Metron, choose Restart/Stop to change the status of the Enrichments, then click OK in the Confirmation dialog box.
   Ambari displays the Background Operations dialog box which provides the status of the operation.
4. Click OK to exit the Background Operations dialog box.