In this lecture I will explain about the school and board B caps script.
So as we have seen when we use the TV replay comment that the timestamps of the events are delayed or
aborted.
Where are those of the date of executing the comet not the date when the recap files were originally
created.
So in order to preserve the original timestamps of these files we have to use desu and import pick up
script but this script is included with the elastic stack so we have to agree to that from Elsa and
we carry around the set up for that purpose.
However in beta but longer way is to use the following comments.
So first we have to use the sudo su comment to install updates and then install and configure elastic
using the following comments.
So now I have completed the upgrade process and here we see that Cuban I was installed.
However the elastic stack demands in memory of 8 gigabytes at least so I have increased the memory to
this value while the VM is bought off.
In addition you might still get into memory issues so that log stash will fail to start.
So let us open a terminal window and check for that using your command sudo su
elastic status
and we see that log stash failed to start.
And in order to solve this issue I will modify the heap size by editing the following file so so do
V.I. ATC look stash
JVM options and we have to change the minimum and maximum size to be 4 gigabytes for example.
So I will change his value to be 4 0 9 6 and this one also
and then I will save and quit.
Now I will restart looks DASH So Sue do sue
stash start
and these might take some time to be complete.
So let us check again
see now that log stash was started and although we can execute shoe import pickups script without the
need for logs touch to be running we need that because we want to see the logs resulted in keep on a
letter and I have already downloaded and extracted you file that we will use you with the script.
So this is the file that I have downloaded and this is the extracted file.
So now in the terminal window I will use the command to do
import backup
downloads and then you name the file and then I will click on enter.
So now we see that the script is working and now we see that the script was completed.
So now if I opened script
and entered my credentials.
So now we do not see any alerts that belongs to our current day.
But if we changed the date to be the
date of the picture file
so we see now the
alerts because that was the date of creating the pick up fight originally.
So in this lecture I have explained using these new import caps correct and in the next lecture we will
explore key banner.