Beltane | ||
---|---|---|
<<< Previous | Next >>> |
After logging in, the main window will show up, which is subdivided into four panels.
In the upper left is the control panel that provides the following four functions:
Edit Beltanes configuration file entries.
Refresh all panels.
Exit the application, and destroy the PHP session.
Show this help.
Also, the current status of the server (running/stopped/unknown) will be indicated. This information is gained by reading the servers PID from the pid file and probing for the existence of the process. The status line doubles as a link to the HTML status page written by the server.
In the Clients panel, Beltane shows the list of currently recognized clients. Left in the title bar, you will find the Add function to add a new client entry.
The status of any client is indicated by a coloured box to the left of the client name (purple = Alert, red = Critical, orange = Error, yellow = Warning, green = Info, white = None). This status corresponds to the most severe new message for the corresponding client.
Right click on a client name will bring up a menu with the following items:
Edit the entry for this client.
Delete the entry for this client.
Show the entry for this client.
Show all new messages for this client.
Show the message corresponding to the status indicator. The message will be shown in the lower right panel. In the title bar, a function Acknowledge is provided.
Beltane requires an up-to-date database of installed clients, and allows you to interactively edit this database, if needed. This database is a flat file in XML format, named yulerc.install.db, and located in the profiles/ subdirectory of the yule data directory.
If you are using the deploy.sh command delivered with samhain in order to deploy clients to remote hosts, this file will already exist, as deploy.sh uses it to log the performed installations. Otherwise, you will need to edit/create the list of installed clients manually.
If the file does not exist on startup, Beltane will create a dummy file. You need to create then a valid entry, before you can delete the DUMMY entry.
The Messages panel displays new messages, i.e. messages not yet acknowledged by the user. For each message, a status icon, the database index, severity, hostname, and message text is shown. The following functions are provided
Click on the coloured status icon to acknowledge the message.
Click on the database index to show details for the message.
Click on the host name to show messages for this client.
When the details of a log message is shown in the lower right panel, you can click on update next to the file path. This will trigger the update of the file signature database, and also acknowledge the corresponding entry in the SQL database.
If you click on Acknowledge instead, the record in the SQL database will get acknowleged, but the file signature database will not get updated (thus after a re-start of the samhain client, you will get a message for that file again).
<<< Previous | Home | Next >>> |
Installing Beltane | Interactive configuration of beltane |