6.15. `Gcenter Services Management` command

6.15.1. Introduction

`Gcenter Services Management` command enables:

  • Rebooting a GCenter application

  • Resetting a GCenter application

  • Restarting a GCenter service

The applications that can be restarted include the following:

App name

Detail

ggcc

Service WebUI #1

gweb

Service WebUI #2

gpostgres

Database service

gproxy

Connection Manager

gabana

Kibana service

gstats

Monitoring service

gunpoint

GCap gateway service

gredis

Ephemeral data service

gredis cache

Ephemeral data service (Used for caching)

glogstash

Threat logging service

gesmaster

ES Master Service

gcti

CTI engine

gdgadetect

DGA engine

gmalcore

Malware analysis engine

geyego

Threat analysis and retroactive orchestration service

goasm

Vulnerability exploitation scanning engine

gps

Powershell scanning engine

The applications that can be reset include the following:

App name

Détail

Reset Malcore Engine

Reset Malcore Engine to factory default settings

Reset Webui configuration

Reset HTTP / HTTPS ports and interface to default configuration

Wipe Elesticsearch index

Removes all internal indexes

Clear & Restart Webui server

Reset web server to default configuration

Clear & Restart Database

Remove local database and restart services

The services that can be restarted include the following:

App name

Détail

nginx

Restarting the web service

uwsgi

Restarting the application management service

celery

Restart the GCenter queue service

redis

Restart ephemeral data management service

unbound

Restart the DNS resolution service

sshd

Restart the GCenter ssh service

sshd_gcap

Restart the GCap-related ssh service

gcenter-healthchecks-daemon

Restarting the GCenter health check service

gcenter-docker-orchestrator

Restarting the docker orchestration service


6.15.2. Prerequisites

  • User : setup


6.15.3. Preliminary operations

Depending on the situation:


6.15.4. Procedure A: Using the `Gcenter Services Management` command

The configuration menu is displayed.

  • Select the `Gcenter Services Management` line or press the letter G.

  • Click on the `OK` button.
    The `Gcenter Services Management` window is shown:
    Restart a GCenter App
    Reset a GCenter App
    Restart a GCenter Service
    

Several choices are available:

Choice

see

Restart a GCenter App

Procedure B: Restarting an application

Reset a GCenter App

Procedure C: Reset a service

Restart a GCenter Service

Procedure D: Restarting an application

  • Press the Exit key to return to the menu.


6.15.5. Procedure B: Restarting an application

The `Restart a GApp` window is displayed.

  • Select the line to be restarted or press the letter G .

  • Click on the `OK` button.

Note

For example, for the ggcc service:

The system displays the following message `You are about to restart ggcc. Are you sure?`

  • Click on the `Yes` button
    A message indicates the restart is in progress.
    Then the system displays the following message `ggcc restarted successfully`.
  • Click on the `OK` button.


6.15.6. Procedure C: Reset a service

The `Reset a GApp` window is displayed.

Choose a GApp to reset:

Reset Malcore Engine        Reset Malcore engine to factory default
Reset Webui configuration   This will reset HTTP / HTTPS and interface to the default configuration
Wipe Elesticsearch index    Delete all internals index
Clear & Restart Webui ser   This will set webserver to default config
Clear & Restart Database    This will empty the local database and restart services
  • Select the service line to be reset or press the corresponding letter.

  • Click on the `OK` button.

Note

For example, for the `Reset Malcore Engine` line:

The system displays the following message `You are about to reset the Malcore Engine to a factory default state. Are you sure?`.

  • Click on the `Yes` button.
    A message indicates the shutdown is in progress.
    Then the system displays the following message `Malcore has been reset successfully`.
  • Click on the `OK` button.


6.15.7. Procedure D: Restarting an application

The `Restart a service` window is displayed:

Choose a service to restart :

    nginx
    uwsgi
    celery
    redis
    unbound
    sshd
    sshd_gcap
    gcenter-healthchecks-daemon
    gcenter-docker-orchestrator
  • Select the line to be restarted or press the corresponding letter.

  • Click on the `OK` button.

Note

For example, for the `nginx` service:

The system displays the following message `You are about to restart nginx. Are you sure?`.

  • Click on the `Yes` button.
    A message indicates the restart is in progress.
    Then the system displays the following message `nginx restarted successfully`.
  • Click on the `OK` button.