Enabling event reporting in SolutionPack for Traffic Flows (Windows)

For Windows, for new single server and distributed installations only, enable the event reporting features.

Run these commands once after a new installation. Do not run these commands after a reconfiguration.

Procedure

1. Execute these commands from the APG\bin folder:

   manage-resources.cmd create dba/ES-TF-CONV "{ 'type': 'elasticsearch', 'datasource': { 'hosts': ['http://localhost:9200'], 'prefix': '/es-dw-flow-conv-topn*' }, 'settings': {'mapping': 'ES-TF-CONV.xml'}, 'disabled': false }}"
       manage-resources.cmd create dba/ES-TF-PROTO "{ 'type': 'elasticsearch', 'datasource': { 'hosts': ['http://localhost:9200'], 'prefix': '/es-dw-flow-protocols*' }, 'settings': {'mapping': 'ES-TF-PROTO.xml'}, 'disabled': false}}"
       manage-resources.cmd create dba/ES-TF-ALLPORTS "{ 'type': 'elasticsearch', 'datasource': { 'hosts': ['http://localhost:9200'], 'prefix': '/es-dw-flow-allports*' }, 'settings': {'mapping': 'ES-TF-ALLPORTS.xml'}, 'disabled': false}}"
       manage-resources.cmd create dba/ES-TF-APP "{ 'type': 'elasticsearch', 'datasource': { 'hosts': ['http://localhost:9200'], 'prefix': '/es-dw-flow-applications-topn*' }, 'settings': {'mapping': 'ES-TF-APP.xml'}, 'disabled': false}}"
       manage-resources.cmd create dba/ES-TF-DATA "{ 'type': 'elasticsearch', 'datasource': { 'hosts': ['http://localhost:9200'], 'prefix': '/es-dw-flow-data*' }, 'settings': {'mapping': 'ES-TF-DATA.xml'}, 'disabled': false}}"
       manage-resources.cmd create dba/ES-TF-DSTADDR "{ 'type': 'elasticsearch', 'datasource': { 'hosts': ['http://localhost:9200'], 'prefix': '/es-dw-flow-dstaddr-topn*' }, 'settings': {'mapping': 'ES-TF-DSTADDR.xml'}, 'disabled': false}}"
       manage-resources.cmd create dba/ES-TF-HOSTS "{ 'type': 'elasticsearch', 'datasource': { 'hosts': ['http://localhost:9200'], 'prefix': '/es-dw-flow-hosts*' }, 'settings': {'mapping': 'ES-TF-HOSTS.xml'}, 'disabled': false}}"
       manage-resources.cmd create dba/ES-TF-INT "{ 'type': 'elasticsearch', 'datasource': { 'hosts': ['http://localhost:9200'], 'prefix': '/es-dw-flow-topint-topn*' }, 'settings': {'mapping': 'ES-TF-INT.xml'}, 'disabled': false}}"
       manage-resources.cmd create dba/ES-TF-NOSNMP "{ 'type': 'elasticsearch', 'datasource': { 'hosts': ['http://localhost:9200'], 'prefix': '/es-dw-flow-nosnmp*' }, 'settings': {'mapping': 'ES-TF-NOSNMP.xml'}, 'disabled': false}}"
       manage-resources.cmd create dba/ES-TF-SRCADDR "{ 'type': 'elasticsearch', 'datasource': { 'hosts': ['http://localhost:9200'], 'prefix': '/es-dw-flow-srcaddr-topn*' }, 'settings': {'mapping': 'ES-TF-SRCADDR.xml'}, 'disabled': false}}" 
   

2. Restart the Tomcat service in order to make the changes effective.