6.2.3.3. start

6.2.3.3.1. Introduction

To view the list of services and their relevance and possible restrictions, refer to the Introduction section.
The start command of the services subgroup enables starting a GCap service although this depends on the current status of these services (see services status command).
By default, the following services are started:

  • The eve-generation service

  • The eve-upload service

  • The file-extraction service

  • The file-upload service


6.2.3.3.2. Prerequisites

  • Users: setup, gviewadm

  • Dependencies: the service must be stopped in order to start it


6.2.3.3.3. Command

Depending on the complement to the services start command, it is possible to perform different operations.

services start {eve-generation|eve-upload|file-extraction|file-upload|filter-fileinfo|local-alerts|eve-compress }

To start...

complete the services start command with...

prerequisites

generation of eve logs

eve-generation

None

sending eve logs to GCenter

eve-upload

You must activate eve-generation

extraction of files by the GCap

file-extraction

None

sending the extracted files to the GCenter

file-upload

File-extraction must be activated

fileinfos filtering

filter-fileinfo

It is necessary to enable:

  1. eve-generation

  2. eve-upload

  3. file-extraction

  4. file-upload

displaying alerts

local-alerts

None

compression of eve logs on GCap

eve-compress

eve-generation must be activated


6.2.3.3.4. Example of starting fileinfos filtering (accessible from the gviewadm account)

  • Enter the following command.

    (gcap-cli) services start filter-fileinfo
    
  • Validate.
    The system indicates that the filter-fileinfo service is starting.

    Starting services filter-fileinfo
    

6.2.3.3.5. Example of starting the compression of eve logs on the GCap

  • Enter the following command.

    (gcap-cli) services start eve-compress
    
  • Validate.
    The system indicates that the eve-compress service is starting.

    Starting services eve-compress
    

6.2.3.3.6. Example of starting local alerts

  • Enter the following command.

    (gcap-cli) services start local-alerts
    
  • Validate.
    The system indicates that the local-alerts service is starting.

    Starting services local-alerts
    

6.2.3.3.7. Example of starting the generation of eve logs at the GCenter

  • Enter the following command.

    (gcap-cli) services start eve-generation 
    
  • Validate.
    The system indicates that the eve-generation service is starting.

    Starting service eve-generation
    

6.2.3.3.8. Example of starting the sending of eve logs to the GCenter

  • If the eve-generation service is not active then start it, see the procedure above.

  • If the eve-generation service is active then continue the procedure.

    • Enter the following command.

      (gcap-cli) services start eve-upload
      
    • Validate.
      The system indicates that the eve-upload service is starting.

      Starting service eve-upload
      

6.2.3.3.9. Example of starting the extraction of files

  • Enter the following command.

    (gcap-cli) services start file-extraction
    
  • Validate.

    The system indicates that the file-extraction service is starting.

    Starting service file-extraction
    

6.2.3.3.10. Example of starting the sending of the extracted files to the GCenter

  • If the file-extraction service is not active then start it, see the procedure above.

  • If the file-extraction service is active then continue the procedure.

    • Enter the following command.

      (gcap-cli) services start file-upload
      
    • Validate.

      The system indicates that the file-upload service is starting.

      Starting service file-upload