Mata Elang

This project currently in active development of 1.1 version

Installations

Components

Mata Elang project, consists of following general components, and the technologies:

• Host OS: Ubuntu 20.04 LTS
• Container Runtime:
  • Docker Engine 20.10.12
  • Docker Compose 1.25.0
• Java / OpenJDK: 11.0 LTS
• Snort: 3.1.47.0 (or later)
• PulledPork: Upgraded to PulledPork 3
• Mosquitto: 2.0.15
• Kafka: 3.3.4
• Apache Spark: 3.3.1
• Scala: 2.13
• Hadoop: 3.3.4 (or later)
• OpenSearch stack: 2.4.0
• Ansible 2.10

Processing Stages Components

• Sensor: Snort
• Data Collection: Apache Kafka, MQTT broker,
• Data Processing: Apache Spark, Kaspa Core
• Data Store: ElasticSearch / OpenSearch
• Data Presentation: Kibana

Requirements

Software

• Operating System: Ubuntu 20.04 / Debian 9 based OS
• Docker

Hardware

Sensor

• CPU Core 2 Duo
• Gigabit LAN card
• 2 GB of RAM
• 100 GB of HDD

Data Processing

• CPU Intel Core i7 / AMD Ryzen 7
• Gigabit LAN card
• 16 GB of RAM
• 500 GB of HDD

Data Storage

• CPU Intel Core i3 / AMD Ryzen 3
• Gigabit LAN card
• 4 GB of RAM
• 1 TB of HDD

Data Presentation

• CPU Intel Core 2 Duo
• LAN card
• 4 GB of RAM
• 500 GB of HDD

Install Preparations

Deployment Methods

You can use our docker-compose.yaml file to quickly start with the Mata Elang Platform. We already automate the process, and you only need to change some configurations.

If you want to try all components in the same host, you can try to check in the all-in-one folder.

⚠️ This default deployment is not recommended for production. You always need to review and change the configuration based on your needs and hardware resources. You still need to secure your environment and configure a firewall before deploying it to the public.

Installation Media Procedures

Currently we're using USB drive to store all dependencies for the project.

Offline Installations

For offline installation purpose, we will be using the Ansible technology to automate the process. Please refer to this folder for Ansible offline install

Online Installations

For the online installation you need a stable internet connection to download all necessary dependencies and components from our repository. There are 2 method for online installation :

1. Manual Installation
2. Automated Installation

Manual Installation

For manual Mata Elang components installation there are several folders in this repository that contain the guidance for the installation :

1. Sensor Snort : sensor folder
2. Mosquitto (MQTT Broker): mosquitto folder
3. Apache Kafka : kafka folder
4. Kaspacore & Apache Spark : spark folder
5. OpenSearch & OpenSearch Dasboard: opensearch folder

Automated Installation

For automated Mata Elang components installation will be applied using Ansible Automation process that refer to this repository:

• Change to Root Directory

cd ~/

• Clone Git Repository

git clone https://gitlab.com/mata-elang/stable/mataelang-ansible-roles.git

For further information, please refer to:

• Ansible documentation
• https://gitlab.com/mata-elang/stable/mataelang-ansible-roles

Usage

Please refer to USAGE.md document

Backup

Please refer to BACKUP.md document

Troubleshoot

1. No swap limit support

WARNING: No swap limit support

If you have a warning message like this while running using docker-compose, you can go to this documentation to fix the issue. https://docs.docker.com/engine/install/troubleshoot/#kernel-cgroup-swap-limit-capabilities