Getting Started: MineMeld

by lmori on ‎02-03-2016 02:27 AM - edited on ‎03-29-2017 04:52 PM by carnould (54,187 Views)

Overview of MineMeld

MineMeld is a low latency processor of indicators feeds. You can think of it as the swiss army knife of feeds. It can be used to continuosly retrieve indicators from external sources, process them and produce new feeds that can be directly consumed by Palo Alto Networks platforms. Viceversa it can be used to continuosly retrieve indicators from Palo Alto Networks platforms and produce feeds that can be consumed by trusted peers and 3rd party security platforms.




Running MineMeld

A typical installation of MineMeld is made of different components, all of them will be made available in Open Source after the launch. MineMeld has been designed to run on a Linux system even with reasonably low system resources (1 VCPU and 1GB of RAM).


To quickly set up a basic installation of MineMeld a pre-configured loader is provided for the Ubuntu 14.04 LTS cloud images. The loader can be used to bootstrap MineMeld on all the platforms supported by Ubuntu cloud images: VMWare desktop, VMWare ESXi, Amazon EC2, OpenStack, KVM, ... It should work even on the good old bare metal !


At the first boot the loader will connect to the minemeld auto update API to retrieve and install the latest available release of MineMeld. So, yes, you need Internet connectivity to install MineMeld for the first time.


Using MineMeld

Once you get MineMeld up and running, you can take a Quick Tour of MineMeld

by EricCapuano
on ‎06-23-2016 05:37 AM

I feel like the answer to this question is painfully obvious and right in front of my face somewhere... but where is the link to download MineMeld? 

by lmori
on ‎06-23-2016 05:43 AM

Hi Eric,

you should choose the virtualization environment you want to run MineMeld on (VMWare, Azure, AWS, ...), and then click on the appropriate article in the MineMeld Article section:

by EricCapuano
on ‎06-23-2016 05:53 AM

Thanks! Is there not an on-prem version available? 

by lmori
on ‎06-23-2016 05:55 AM
by chmotley
on ‎01-23-2017 12:30 PM

After successfully setting up the Ubuntu + Minemeld CD, I'm having issues logging back into the console (shell) with the above credentials (u: admin / pw: minemeld). I have also tried ubuntu/rsplizardspock, but no luck. 


Do the login credentials change after setting up MineMeld?

by lmori
on ‎01-25-2017 05:46 AM

Hi @chmotley,

no, they don't. Could you open a discussion in the forum so we can check the issue ?


Thanks !

by NickD.
on ‎02-02-2017 01:14 PM

 Hello All,


What is VMWare Desktop?  Is this the same thing as VMWare workstation.  I see instructions on installing MineMeld on VMWare desktop, but nothing regarding installing into ESXi.  We are running ESXi 6.0.  Any direction you can get me to get started will be much appreciated.

by lmori
on ‎02-03-2017 10:41 AM

Hi @NickD.,

you can install on ESXi by loading the Ubuntu 14.04 cloud image OVA on ESXi and then attaching the ISO file to the instance. Or you can install Ubuntu 14.04 on a new instance and then install MineMeld on top of it.

by mramsaw
on ‎10-26-2017 07:23 AM

Hi There, 


First time posting in here and completely new to MineMeld. My boss has asked me to see if there is a way to automate information from MineMeld to populate a rule in the Palo Alto. Essentially we want to have the restricted IPs found in MineMeld to be scheduled to automatically populate a rule we will be creating to block those IPs from users trying to access them. 

by xhoms
on ‎11-09-2017 08:36 AM

@mramsaw : I think that the feature that you're looking for is the External Dynamic List  (EDL). You do not need to populate rules. You just need a rule using the EDL object and let MineMeld populate the contents of the EDL.

on ‎06-15-2018 01:03 PM

Services are running now! On Ubuntu, but after installation is complete and confirmed I have not been able to find  how I can access the web or access it? Can you provide us with after installation on a Ubuntu Server to then access minemeld gui?? Maybe i missed it, but could not findany info???


Ask Questions Get Answers Join the Live Community