6.3. List of potential actions of the gviewadm account
From the gviewadm account, it will be possible:
Accessing the GCap and GCenter
To perform the following task
Choose the following procedure
Remote connection to GCap via an SSH tunnel
1 - Procedure to remote connection to GCap via an SSH tunnel
Connect to the GCenter via a web browser
Configure the GCap
To perform the following task
Carry out the following procedures in succession
Display the current keyboard language
1 - Display: use the show keymap commandModify the keyboard language.
1 - Display: use the show keymap command2 - Modify: use the set keymap commandEnable or disable colors for the current CLI session
1 - Use the color command
Modify the passwords for gviewadm and gview
To perform the following task
Carry out the following procedures in succession
Display the list of users
1 - Display the list: use the show passwords commandModify the passwords for gviewadm and gview
1 - Display the list: use the show passwords command2 - Change passwords: use the set passwords commandModify the authentication SSH keys for gviewadm and gview
1 - Use the set ssh-keys command
Display the password policy
2 - Use the show password-policy command
manage the detection engine
To perform the following task
Carry out the following procedures in succession
Start the detection engine
1 - Use the monitoring-engine start command
Stop the Sigflow monitor engine
1 - Use the monitoring-engine stop command
Display the detection engine status
1 - Use the monitoring-engine status command
Replay a pcap file of traffic generation
1 - Use the replay command
Manage the server
Monitoring the GCAP
To perform the following task
Carry out the following procedures in succession
Display the current status of the GCap
1 - Use the show status command
Display the statistics of the Sigflow detection engine
1 - Use the show eve-stats command
Display GCap statistics and health information
1 - Use the show health command