Beltane | ||
---|---|---|
<<< Previous | Next >>> |
After logging in, the main window will show up, which is subdivided into four panels.
In the upper left is the control panel that provides the following four functions:
Edit Beltanes configuration file entries.
Refresh all panels.
Exit the application, and destroy the PHP session.
Show this help.
Also, the current status of the server (running/stopped/unknown) will be indicated. This information is gained by reading the servers PID from the pid file and probing for the existence of the process. The status line doubles as a link to the HTML status page written by the server.
In the Clients panel, Beltane shows the list of currently recognized clients. Left in the title bar, you will find the Add function to add a new client entry.
The status of any client is indicated by a coloured box to the left of the client name (purple = Alert, red = Critical, orange = Error, yellow = Warning, green = Info, white = None). This status corresponds to the most severe new message for the corresponding client.
Right click on a client name will bring up a menu with the following items:
Edit the entry for this client.
Delete the entry for this client.
Show the entry for this client.
Show all new messages for this client.
Show the message corresponding to the status indicator. The message will be shown in the lower right panel. In the title bar, a function Acknowledge is provided.
Beltane requires an up-to-date database of installed clients, and allows you to interactively edit this database, if needed. This database is a flat file in XML format, named yulerc.install.db, and located in the profiles/ subdirectory of the yule data directory. For each client, this file has the following entries:
The FQDN (or IP number, if yule cannot resolve the IP) of the client host. This the only entry that is currently used by beltane.
The OS of the client host (e.g. redhatlinux_i386, suselinux_i386, debianlinux_i386, solaris).
Date the samhain client was installed on the host.
The name under which the samhain client was installed on the host. (Samhain fully supports re-naming to some arbitrary name, including re-naming directories, pid file, etc.).
The argument to the --prefix option of the configure script for that client. Basically, this, together with the install name, should allow to determine the name and location of the samhain executable on the client host.
If you are using the deploy.sh command delivered with samhain in order to deploy clients to remote hosts, this file will already exist, as deploy.sh uses it to log the performed installations. Otherwise, you will need to edit/create the list of installed clients manually.
If the file does not exist on startup, Beltane will create a dummy file. You need to create then a valid entry, before you can delete the DUMMY entry.
![]() | Warning |
---|---|
Beltane will need the the FQDN of clients in the client database (or the IP number, if clients are known to yule by IP number only). In particular, Beltane will not function properly if you have only the hostname in the client database, and yule is configured to strip the domain. |
The Messages panel displays new messages, i.e. messages not yet acknowledged by the user. For each message, a status icon, the database index, severity, hostname, the message text, and (if applicable) the file path is shown. Each message can be selected with a select box to the left.
Clicking on the database index will display all details of the respective message. Clicking on the host name will alter the message panel to show messages for that host only (use All Clients in the upper right to reset). In addition, the following functions are provided
For all selected messages, the file signature database of the respective client will be updated, and the message be marked as confirmed. Messages for which file signature updates are not applicable (e.g. client startup messages) are handled gracefully.
All selected messages will be marked as confirmed. No update of file signature databases will be performed.
Select all displayed messages.
De-select all selected messages.
When the details of a log message are shown in the lower right panel, you can click on update next to the file path. This will trigger the update of the file signature database, and also acknowledge the corresponding entry in the SQL database.
If you click on Acknowledge instead, the record in the SQL database will get acknowleged, but the file signature database will not get updated (thus after a re-start of the samhain client, you will get a message for that file again).
<<< Previous | Home | Next >>> |
Installing Beltane | Interactive configuration of beltane |