pdml2flow-elasticsearch

Saves pdml2flow output in Elasticsearch

Branch	Build	Coverage
master
develop

Prerequisites

• pdml2flow

• pip

Installation

    $ sudo pip install pdml2flow-elasticsearch

Usage

$ pdml2flow +elasticsearch -h
usage: Elasticsearch output [-h] [--host ES_HOST] [--port ES_PORT]
                            [--flowindex ES_FLOW_INDEX]
                            [--flowtype ES_FLOW_TYPE] [--no-frames]
                            [--frameindex ES_FRAME_INDEX]
                            [--frametype ES_FRAME_TYPE]

optional arguments:
  -h, --help            show this help message and exit
  --host ES_HOST        Elasticsearch api host [default: localhost]
  --port ES_PORT        Elasticsearch api port [default: 9200]
  --flowindex ES_FLOW_INDEX
                        Index name [default: pdml2flow]
  --flowtype ES_FLOW_TYPE
                        Type [default: flow]
  --no-frames           Do not store frames [default: False]
  --frameindex ES_FRAME_INDEX
                        Index name [default: pdml2frame]
  --frametype ES_FRAME_TYPE
                        Type [default: frame]

Example

Test environment

$ sysctl -w vm.max_map_count=262144
$ docker-compose up

• Elasticsearch: http://localhost:9000
• Kibana: http://localhost:5601