Stop All Metron Services

You need to stop all Metron services prior to uninstalling Metron.

  1. Stop any inputs into Metron.
    For example, stop any NiFi feeds.
  2. In Ambari, stop all Metron services in the following order:
    • Metron Alerts UI
    • Metron Management UI
    • Metron REST
  3. Stop Storm.
    1. From the Storm node, list all of the Storm topologies that are currently running:
      storm list
      If any topologies are running, your output should look similar to the following:
      Running: /usr/jdk64/jdk1.8.0_112/bin/java -Dstorm.options= 
      -Dstorm.home=/usr/hdp/ -Dstorm.log.dir=/var/log/storm 
      -Dstorm.conf.file= -cp /usr/hdp/
      /ojdbc6.jar:/usr/hdp/current/storm-supervisor/conf:/usr/hdp/ org.apache.storm.command.list
      2670 [main] INFO  o.a.s.u.NimbusClient - Found leader nimbus : node1:6627
      Topology_name        Status     Num_tasks  Num_workers  Uptime_secs
      enrichment           ACTIVE     8          1            49253
      bro__snort__yaf      ACTIVE     7          1            48749
      batch_indexing       ACTIVE     5          1            48613
      pcap                 ACTIVE     3          1            49140
      profiler             ACTIVE     7          1            49001
      random_access_indexing ACTIVE     5          1            48493
    2. Kill each of the running Storm topologies in the following order:
      • all parsers such as bro and snort
      • enrichment
      • indexing
      • profiler
      storm kill bro
    3. Return to the Storm UI and verify that all topologies are killed.
    4. In Ambari, stop Storm by selecting Storm and clicking Stop All in the Actions menu.
  4. Ensure that the UIs are shut down.
    If the Metron Alerts Ui or Metron Management UI status in Ambari is "running," shut down the UIs by entering the following:
    service metron-alerts-ui status
    service metron-alerts-ui stop
    service metron-management-ui status
    service metron-management-ui stop