Nybble
Nybble standalone installation.
Nybble requires Java 8 or Java 11. If Java is not already installed on your server, please follow steps on Prerequisites page.
Nybble is directly packaged with Flink and all the dependencies, so Flink will be installed during the process.
At this time install.sh script is only for installation on CentOS 7 or 8. As Nybble just require Java and Redis, you should be able perform the installation on other distro but manually.

Download Nybble

From archives:
1
cd /opt
2
wget https://nybble-analytics.s3-us-west-2.amazonaws.com/siem/nybble-analytics-0.1.tar.gz
3
tar zxf nybble-analytics-0.1.tar.gz
Copied!
From Git:
1
cd /opt
2
git clone https://github.com/NybbleHub/Nybble.git
3
ln -s /opt/nybble-analytics-0.1/ /opt/nybble-analytics
Copied!
Create a symbolic link 'nybble-analytics' (Simpliest path and easier for upgrade)
1
ln -s /opt/nybble-analytics-0.1/ /opt/nybble-analytics
2
#Or
3
ln -s /opt/Nybble/ /opt/nybble-analytics
Copied!

Install Nybble

Install.sh script will create nybble service user and group, create a profile script with Nybble and Java environment variable, create and install the systemd script, set Flink configuration and install Redis.
If you install Nybble on a Raspberry Pi with CentOS, use guide in appendix for Redis install.
Run install.sh script:
1
cd /opt/nybble-analytics/
2
./install.sh
3
4
# Load new profile file containing environment variables
5
source /etc/profile
Copied!
Start and enable Nybble:
1
sudo systemctl start nybble
2
sudo systemctl enable nybble
Copied!
Check if cluster and job are running from Flink frontend:
Access http://$your_server_ip:8081
Nybble Analytics SIEM Job running
Nybble Analytics SIEM tasks
Last modified 1yr ago