search

JanSkalny / zabbix-misp

Zabbix template for MISP monitoring
The Unlicense
2 stars 0 forks source link

readme

zabbix-misp

Zabbix template for MISP monitoring

Installation

  1. Import template & value mappings (template.xml).
  2. Add "MISP" template to your hosts / groups.
  3. Install zabbix_misp.sh script: 
    cp zabbix_misp.sh /usr/local/bin/zabbix_misp.sh
chmod a+rx /usr/local/bin/zabbix_misp.sh
  4. Allow zabbix user to run zabbix_misp.sh as root 
    cp sudoers /etc/sudoers.d/zabbix-misp
  5. Add MISP specific UserParameters to zabbix-agent: 
    cp misp.conf /etc/zabbix/zabbix_agentd.d/
  6. Install dependencies (sudo, jq, ...)

Requirements