USING THIS SCRIPT

1. Certify that you have events in your HBase, generated by Hogzilla IDS
2. Run /usr/bin/php pigtail.php
3. If every thing is OK, you can the command below and put it in /etc/rc.local
    /usr/bin/php pigtail.php >& /dev/null &

ATTENTION: This PHP script must run in CLI!

If you have any problems, let us know!
See how to get help at http://ids-hogzilla.org/post/community/


INSTALLATION EXAMPLE

- Install Thrift first
- Commands for reference
  $ mkdir /home/hogzilla/app
  $ cd /home/hogzilla/app
  $ sudo apt-get install git
  $ git clone https://github.com/pauloangelo/pigtail.git
  $ sudo mkdir /usr/lib/php/Thrift/Packages/
  $ sudo mv pigtail/gen-php/Hbase/  /usr/lib/php/Thrift/Packages/
  $ sudo apt-get install php5-mysql
  $ cd /home/hogzilla/app/pigtail
  $ composer update
  $ ./pigtail.php


wget http://geolite.maxmind.com/download/geoip/database/GeoLiteCity.dat.gz
gunzip GeoLiteCity.dat.gz
sudo mkdir -v /usr/share/GeoIP
sudo mv -v GeoLiteCity.dat /usr/share/GeoIP/GeoIPCity.dat
sudo apt-get install php5-geoip