The following guide is for quick evaluation only. If you're building a production deployment, please see the Production Deployment section.
If you want to quickly evaluate Security Onion on your preferred flavor of Ubuntu 16.04 64-bit (not using our ISO image), follow these steps:
Review the Hardware Requirements page.
Download the ISO image for your preferred flavor of Ubuntu 16.04 64-bit, verify the ISO image, and boot from it.
Follow the prompts in the installer. If prompted to
encrypt home folder
orencrypt partition
, DO NOT enable either of these. When asked about automatic updates, DO NOT enable automatic updates.Reboot into your new installation.
Login using the username and password you specified during installation.
Verify that you have Internet connectivity. If necessary, configure your proxy settings.
Log back in.
Configure
MySQL
not to prompt for root password (Setup will generate a random password later):echo "debconf debconf/frontend select noninteractive" | sudo debconf-set-selections
Clean apt list repository:
sudo rm -rf /var/lib/apt/lists/*
Update package list:
sudo apt-get update
Install software-properties-common if necessary:
sudo apt-get -y install software-properties-common
Add the Security Onion stable repository:
sudo add-apt-repository -y ppa:securityonion/stable
Update package list:
sudo apt-get update
Install the securityonion-all metapackage:
sudo apt-get -y install securityonion-all syslog-ng-core
If you want to use Salt, then also install
securityonion-onionsalt
. You can do this before or after Setup, but it's much easier if you do it before Setup.sudo apt -y install securityonion-onionsalt
Run the Setup wizard (you can replace
sosetup
withsosetup-minimal
if you prefer the minimal configuration):sudo sosetup
Follow the prompts in the Setup wizard.
Once Setup is complete, review alerts and logs using Sguil, Squert, and Kibana.
Review the PostInstallation page.