clong / DetectionLab

Automate the creation of a lab environment complete with security tooling and logging best practices
MIT License
4.57k stars 978 forks source link

Unable to ssh into logger #880

Open arunvl88 opened 1 year ago

arunvl88 commented 1 year ago

Description of the issue:

The main issue is I'm seeing this error on my splunk after running few tests: The minimum free disk space (5000MB) reached for /opt/splunk/var/run/splunk/dispatch

Sub issue

In order to fix this I need to SSH into my logger. I'm using the id_logger keys created during the deployment. When I login using this keypair to the logger, it is asking me for username and password. I did not set any password when creating this key pair. I tried few passwords like vagrant,changeme etc but not working.

Question

Please let me know how can I ssh into my logger using id_logger key pair.

arunvl88 commented 1 year ago

It appears AWS only supports private key in .PEM or .PPK format. The keys created in this project were using OpenSSH format: ssh-keygen -b 4096 -f ~/.ssh/id_logger

zmackie commented 1 year ago

It seems like this is a bug report along the lines of "AWS SSH keys in Improper format"?

You should still be able to access the machine on AWS using other means, right?