Merge pull request #399 from lnxg33k/master

Should fix an issue when installing zeek
This commit is contained in:
Chris Long
2020-03-21 14:11:00 -07:00
committed by GitHub

View File

@@ -232,7 +232,7 @@ install_splunk() {
# echo "[$(date +%H:%M:%S)]: Download Complete." # echo "[$(date +%H:%M:%S)]: Download Complete."
# echo "[$(date +%H:%M:%S)]: Extracting to Splunk Apps directory" # echo "[$(date +%H:%M:%S)]: Extracting to Splunk Apps directory"
# tar zxvf /opt/botsv3_data_set.tgz -C /opt/splunk/etc/apps/ # tar zxvf /opt/botsv3_data_set.tgz -C /opt/splunk/etc/apps/
### BOTSv3 COMMENT BLOCK ENDS ### ### BOTSv3 COMMENT BLOCK ENDS ###
# Add custom Macro definitions for ThreatHunting App # Add custom Macro definitions for ThreatHunting App
cp /vagrant/resources/splunk_server/macros.conf /opt/splunk/etc/apps/ThreatHunting/default/macros.conf cp /vagrant/resources/splunk_server/macros.conf /opt/splunk/etc/apps/ThreatHunting/default/macros.conf
@@ -371,7 +371,7 @@ install_zeek() {
# Install tools to build and configure Zeek # Install tools to build and configure Zeek
apt-get -qq -ym install zeek crudini python-pip apt-get -qq -ym install zeek crudini python-pip
export PATH=$PATH:/opt/zeek/bin export PATH=$PATH:/opt/zeek/bin
pip install zkg pip install zkg==2.1.1
zkg refresh zkg refresh
zkg autoconfig zkg autoconfig
zkg install --force salesforce/ja3 zkg install --force salesforce/ja3