-
Book Overview & Buying
-
Table Of Contents
-
Feedback & Rating
Threat Hunting with Elastic Stack
By :
As we move forward in the chapter (and beyond), we'll not need to repeat these steps as Kibana, Fleet, and the detection engine all reside on the same guest.
As discussed previously, using a package manager is much cleaner and easier than simply running binaries as we did in some examples in the previous chapter.
Once again, we'll be using yum or DNF as our package manager, but first, we need to add the Elastic repositories.
We'll use nano as our text editor (because it's a bit easier), but feel free to use vim or the like if you're more comfortable (or any other text editor).
Let's create the elastic.repo file in the /etc/yum.repos.d directory:
$ sudo nano /etc/yum.repos.d/elastic.repo
[elastic]
name=Elastic repository for 7.x packages
baseurl=https://artifacts.elastic.co/packages/7.x/yum
gpgcheck=1
gpgkey=https://artifacts.elastic.co/GPG-KEY-elasticsearch
enabled...