Skip to content

Instantly share code, notes, and snippets.

@taylorwalton

taylorwalton/packetbeat_install.sh

Last active October 20, 2023 12:17
Show Gist options

  • Select an option

    Learn more about clone URLs
  • Save taylorwalton/a23f7e99c49e42bc524d61551d2045ba to your computer and use it in GitHub Desktop.

Select an option

Learn more about clone URLs
Save taylorwalton/a23f7e99c49e42bc524d61551d2045ba to your computer and use it in GitHub Desktop.
Download ZIP

Revisions

  1. taylorwalton revised this gist Oct 22, 2022. 1 changed file with 3 additions and 2 deletions.
    5 changes: 3 additions & 2 deletions packetbeat_install.sh
    View file
    Original file line number Diff line number Diff line change
    @@ -38,7 +38,7 @@ if [ -d "$DIR" ]; then
    logger "Packetbeat found. Not Installing"
    exit 0
    else
    logger "Need assistance? Shoot us an email at [email protected]!"
    logger "Installing Packetbeat"
    if [ ${sys_type} == "yum" ]; then
    eval "curl -L -O https://artifacts.elastic.co/downloads/beats/packetbeat/packetbeat-7.16.3-x86_64.rpm ${debug}"
    eval "rpm -vi packetbeat-7.16.3-x86_64.rpm ${debug}"
    @@ -49,4 +49,5 @@ logger "Need assistance? Shoot us an email at [email protected]!"
    eval "wget ${PACKETBEAT_YAML} -O /etc/packetbeat/packetbeat.yml ${debug}"
    fi
    fi
    service packetbeat restart
    service packetbeat restart
    logger "Need assistance? Shoot us an email at [email protected]!"
  2. taylorwalton revised this gist Oct 22, 2022. 1 changed file with 0 additions and 2 deletions.
    2 changes: 0 additions & 2 deletions packetbeat_install.sh
    View file
    Original file line number Diff line number Diff line change
    @@ -43,12 +43,10 @@ logger "Need assistance? Shoot us an email at [email protected]!"
    eval "curl -L -O https://artifacts.elastic.co/downloads/beats/packetbeat/packetbeat-7.16.3-x86_64.rpm ${debug}"
    eval "rpm -vi packetbeat-7.16.3-x86_64.rpm ${debug}"
    eval "wget ${PACKETBEAT_YAML} -O /etc/packetbeat/packetbeat.yml ${debug}"
    #eval "dos2unix /etc/packetbeat/packetbeat.yml ${debug}"
    elif [ ${sys_type} == "apt-get" ]; then
    eval "curl -L -O https://artifacts.elastic.co/downloads/beats/packetbeat/packetbeat-7.16.3-amd64.deb ${debug}"
    eval "dpkg -i packetbeat-7.16.3-amd64.deb ${debug}"
    eval "wget ${PACKETBEAT_YAML} -O /etc/packetbeat/packetbeat.yml ${debug}"
    #eval "dos2unix /etc/packetbeat/packetbeat.yml ${debug}"
    fi
    fi
    service packetbeat restart
  3. taylorwalton revised this gist Oct 22, 2022. 1 changed file with 1 addition and 2 deletions.
    3 changes: 1 addition & 2 deletions packetbeat_install.sh
    View file
    Original file line number Diff line number Diff line change
    @@ -50,6 +50,5 @@ logger "Need assistance? Shoot us an email at [email protected]!"
    eval "wget ${PACKETBEAT_YAML} -O /etc/packetbeat/packetbeat.yml ${debug}"
    #eval "dos2unix /etc/packetbeat/packetbeat.yml ${debug}"
    fi
    service packetbeat restart
    fi
    fi
    service packetbeat restart
  4. taylorwalton revised this gist Oct 22, 2022. 1 changed file with 4 additions and 4 deletions.
    8 changes: 4 additions & 4 deletions packetbeat_install.sh
    View file
    Original file line number Diff line number Diff line change
    @@ -40,13 +40,13 @@ if [ -d "$DIR" ]; then
    else
    logger "Need assistance? Shoot us an email at [email protected]!"
    if [ ${sys_type} == "yum" ]; then
    eval "curl -L -O https://artifacts.elastic.co/downloads/beats/packetbeat/packetbeat-8.4.3-x86_64.rpm ${debug}"
    eval "rpm -vi packetbeat-8.4.3-x86_64.rpm ${debug}"
    eval "curl -L -O https://artifacts.elastic.co/downloads/beats/packetbeat/packetbeat-7.16.3-x86_64.rpm ${debug}"
    eval "rpm -vi packetbeat-7.16.3-x86_64.rpm ${debug}"
    eval "wget ${PACKETBEAT_YAML} -O /etc/packetbeat/packetbeat.yml ${debug}"
    #eval "dos2unix /etc/packetbeat/packetbeat.yml ${debug}"
    elif [ ${sys_type} == "apt-get" ]; then
    eval "curl -L -O https://artifacts.elastic.co/downloads/beats/packetbeat/packetbeat-8.4.3-amd64.deb ${debug}"
    eval "dpkg -i packetbeat-8.4.3-amd64.deb ${debug}"
    eval "curl -L -O https://artifacts.elastic.co/downloads/beats/packetbeat/packetbeat-7.16.3-amd64.deb ${debug}"
    eval "dpkg -i packetbeat-7.16.3-amd64.deb ${debug}"
    eval "wget ${PACKETBEAT_YAML} -O /etc/packetbeat/packetbeat.yml ${debug}"
    #eval "dos2unix /etc/packetbeat/packetbeat.yml ${debug}"
    fi
  5. taylorwalton revised this gist Oct 22, 2022. 1 changed file with 0 additions and 1 deletion.
    1 change: 0 additions & 1 deletion packetbeat_install.sh
    View file
    Original file line number Diff line number Diff line change
    @@ -42,7 +42,6 @@ logger "Need assistance? Shoot us an email at [email protected]!"
    if [ ${sys_type} == "yum" ]; then
    eval "curl -L -O https://artifacts.elastic.co/downloads/beats/packetbeat/packetbeat-8.4.3-x86_64.rpm ${debug}"
    eval "rpm -vi packetbeat-8.4.3-x86_64.rpm ${debug}"
    install_result="${PIPESTATUS[0]}"
    eval "wget ${PACKETBEAT_YAML} -O /etc/packetbeat/packetbeat.yml ${debug}"
    #eval "dos2unix /etc/packetbeat/packetbeat.yml ${debug}"
    elif [ ${sys_type} == "apt-get" ]; then
  6. taylorwalton revised this gist Oct 22, 2022. 1 changed file with 2 additions and 3 deletions.
    5 changes: 2 additions & 3 deletions packetbeat_install.sh
    View file
    Original file line number Diff line number Diff line change
    @@ -43,13 +43,12 @@ logger "Need assistance? Shoot us an email at [email protected]!"
    eval "curl -L -O https://artifacts.elastic.co/downloads/beats/packetbeat/packetbeat-8.4.3-x86_64.rpm ${debug}"
    eval "rpm -vi packetbeat-8.4.3-x86_64.rpm ${debug}"
    install_result="${PIPESTATUS[0]}"
    eval "wget --auth-no-challenge --user ${USER} --password "${PASS}" ${PACKETBEAT_YAML} -O /etc/packetbeat/packetbeat.yml ${debug}"
    eval "wget ${PACKETBEAT_YAML} -O /etc/packetbeat/packetbeat.yml ${debug}"
    #eval "dos2unix /etc/packetbeat/packetbeat.yml ${debug}"
    elif [ ${sys_type} == "apt-get" ]; then
    eval "curl -L -O https://artifacts.elastic.co/downloads/beats/packetbeat/packetbeat-8.4.3-amd64.deb ${debug}"
    eval "dpkg -i packetbeat-8.4.3-amd64.deb ${debug}"
    install_result="${PIPESTATUS[0]}"
    eval "wget --auth-no-challenge --user ${USER} --password "${PASS}" ${PACKETBEAT_YAML} -O /etc/packetbeat/packetbeat.yml ${debug}"
    eval "wget ${PACKETBEAT_YAML} -O /etc/packetbeat/packetbeat.yml ${debug}"
    #eval "dos2unix /etc/packetbeat/packetbeat.yml ${debug}"
    fi
    service packetbeat restart
  7. taylorwalton revised this gist Oct 22, 2022. 1 changed file with 1 addition and 3 deletions.
    4 changes: 1 addition & 3 deletions packetbeat_install.sh
    View file
    Original file line number Diff line number Diff line change
    @@ -1,8 +1,6 @@
    #!/bin/bash
    PATH=/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin
    USER="freetiersocfortress"
    PASS="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"
    PACKETBEAT_YAML="https://raw.githubusercontent.com/socfortress/Free-Tier/main/Config%20Files/packetbeat.yml"
    PACKETBEAT_YAML="https://raw.githubusercontent.com/socfortress/Wazuh-Rules/main/Packetbeat/packetbeat.yml"

    logger() {

  8. taylorwalton revised this gist Oct 22, 2022. 1 changed file with 20 additions and 0 deletions.
    20 changes: 20 additions & 0 deletions packetbeat_install.sh
    View file
    Original file line number Diff line number Diff line change
    @@ -4,6 +4,26 @@ USER="freetiersocfortress"
    PASS="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"
    PACKETBEAT_YAML="https://raw.githubusercontent.com/socfortress/Free-Tier/main/Config%20Files/packetbeat.yml"

    logger() {

    now=$(date +'%m/%d/%Y %H:%M:%S')
    case $1 in
    "-e")
    mtype="ERROR:"
    message="$2"
    ;;
    "-w")
    mtype="WARNING:"
    message="$2"
    ;;
    *)
    mtype="INFO:"
    message="$1"
    ;;
    esac
    echo $now $mtype $message
    }

    if [ -n "$(command -v yum)" ]; then
    sys_type="yum"
    sep="-"
  9. taylorwalton revised this gist Oct 22, 2022. 1 changed file with 1 addition and 1 deletion.
    2 changes: 1 addition & 1 deletion packetbeat_install.sh
    View file
    Original file line number Diff line number Diff line change
    @@ -26,7 +26,7 @@ logger "Need assistance? Shoot us an email at [email protected]!"
    eval "rpm -vi packetbeat-8.4.3-x86_64.rpm ${debug}"
    install_result="${PIPESTATUS[0]}"
    eval "wget --auth-no-challenge --user ${USER} --password "${PASS}" ${PACKETBEAT_YAML} -O /etc/packetbeat/packetbeat.yml ${debug}"
    eval "dos2unix /etc/packetbeat/packetbeat.yml ${debug}"
    #eval "dos2unix /etc/packetbeat/packetbeat.yml ${debug}"
    elif [ ${sys_type} == "apt-get" ]; then
    eval "curl -L -O https://artifacts.elastic.co/downloads/beats/packetbeat/packetbeat-8.4.3-amd64.deb ${debug}"
    eval "dpkg -i packetbeat-8.4.3-amd64.deb ${debug}"
  10. taylorwalton revised this gist Oct 22, 2022. 1 changed file with 1 addition and 1 deletion.
    2 changes: 1 addition & 1 deletion packetbeat_install.sh
    View file
    Original file line number Diff line number Diff line change
    @@ -32,7 +32,7 @@ logger "Need assistance? Shoot us an email at [email protected]!"
    eval "dpkg -i packetbeat-8.4.3-amd64.deb ${debug}"
    install_result="${PIPESTATUS[0]}"
    eval "wget --auth-no-challenge --user ${USER} --password "${PASS}" ${PACKETBEAT_YAML} -O /etc/packetbeat/packetbeat.yml ${debug}"
    eval "dos2unix /etc/packetbeat/packetbeat.yml ${debug}"
    #eval "dos2unix /etc/packetbeat/packetbeat.yml ${debug}"
    fi
    service packetbeat restart
    fi
  11. taylorwalton created this gist Oct 22, 2022.
    39 changes: 39 additions & 0 deletions packetbeat_install.sh
    View file
    Original file line number Diff line number Diff line change
    @@ -0,0 +1,39 @@
    #!/bin/bash
    PATH=/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin
    USER="freetiersocfortress"
    PASS="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"
    PACKETBEAT_YAML="https://raw.githubusercontent.com/socfortress/Free-Tier/main/Config%20Files/packetbeat.yml"

    if [ -n "$(command -v yum)" ]; then
    sys_type="yum"
    sep="-"
    elif [ -n "$(command -v zypper)" ]; then
    sys_type="zypper"
    sep="-"
    elif [ -n "$(command -v apt-get)" ]; then
    sys_type="apt-get"
    sep="="
    fi

    DIR="/etc/packetbeat"
    if [ -d "$DIR" ]; then
    logger "Packetbeat found. Not Installing"
    exit 0
    else
    logger "Need assistance? Shoot us an email at [email protected]!"
    if [ ${sys_type} == "yum" ]; then
    eval "curl -L -O https://artifacts.elastic.co/downloads/beats/packetbeat/packetbeat-8.4.3-x86_64.rpm ${debug}"
    eval "rpm -vi packetbeat-8.4.3-x86_64.rpm ${debug}"
    install_result="${PIPESTATUS[0]}"
    eval "wget --auth-no-challenge --user ${USER} --password "${PASS}" ${PACKETBEAT_YAML} -O /etc/packetbeat/packetbeat.yml ${debug}"
    eval "dos2unix /etc/packetbeat/packetbeat.yml ${debug}"
    elif [ ${sys_type} == "apt-get" ]; then
    eval "curl -L -O https://artifacts.elastic.co/downloads/beats/packetbeat/packetbeat-8.4.3-amd64.deb ${debug}"
    eval "dpkg -i packetbeat-8.4.3-amd64.deb ${debug}"
    install_result="${PIPESTATUS[0]}"
    eval "wget --auth-no-challenge --user ${USER} --password "${PASS}" ${PACKETBEAT_YAML} -O /etc/packetbeat/packetbeat.yml ${debug}"
    eval "dos2unix /etc/packetbeat/packetbeat.yml ${debug}"
    fi
    service packetbeat restart
    fi
    fi