Adding a Miner to the default config

Printer Friendly Page

The default config provides a graph for handling inbound IPv4 Threat Indicators, IPv4 addresses related to suspicious inbound activities like brute forcing on scanning. In this article we will add a new Miner to this graph.

 

1. Adding a Miner

 

Click on CONFIG in the top navigation bar.

 

config.png

 

And press + to add the node.

 

2. Configuring the Miner

 

Select the PROTOTYPE, and leave the INPUTS field empty. Enable the OUTPUT. Press OK when done.

 

Note. if you leave the pointer on a prototype a tooltip appears with the description of the prototype.

 

add-node.png

 

3. Linking the Miner to the aggregator

 

Now you have created a new Miner in the candidate config, but the Miner is not linked to any downstream node.

 

 

config-after-add.png

 

Click on the INPUTS field of the inboundaggregator node and add the new Miner to the list. Press OK when done.

 

add-input-inbound.png

 

4. Commit the config

 

Now you should have a new Miner connected to the inboundaggregator.

 

config-after-input.png

 

Press COMMIT to apply the config.

 

5.  Check the engine status

 

Click SYSTEM in the top navigation bar to check the engine status. It should stop and then start.

 

check-system1.png

 

check-system2.png

 

The processing graph after the change should look like this:

 

graph-after-change.png

Comments

Capture.PNG

 

Hi is there any good user guide to get this ting working?

It seams that nothing i do is allowed or saved.

The only thing i have don on the box is changing the ubuntu password and the root password.

I use 0.9.0 rc 2h1

 

if there is a tutorial of som sort great

Hi Kimwii, something is wrong on the VM. Could you open a discussion in the MineMeld discussion section so we can start taking a look at it ?

Ask Questions Get Answers Join the Live Community
Version history
Revision #:
1 of 1
Last update:
‎02-03-2016 02:02 AM
Updated by:
 
Contributors