User Tools

Site Tools


inspector:started

This is an old revision of the document!


The following will get you basic set up that will allow you to generate cadf messages within ceilometer from keystone. This should be considered a work in progress guide and therefore open to expansion.

1. Grab devstack:

git clone https://git.openstack.org/openstack-dev/devstack

2. Set up a local_rc

  FLOATING_RANGE=192.168.1.224/27
  FIXED_RANGE=10.11.12.0/24
  FIXED_NETWORK_SIZE=256
  FLAT_INTERFACE=eth0
  RECLONE=yes
  ENABLED_SERVICES=key,ceilometer-acentral,ceilometer-acompute,ceilometer-alarm-evaluator,ceilometer-alarm-notifier,ceilometer-anotification,ceilometer-api,ceilometer-collector,g-api,g-reg,n-api,n-crt,n-obj,n-cpu,n-net,n-cond,cinder,c-sch,c-api,c-vol,n-sch,n-cauth,horizon,mysql,rabbit
  SERVICE_TOKEN=cadftest
  ADMIN_PASSWORD=cadftest
  MYSQL_PASSWORD=cadftest
  RABBIT_PASSWORD=cadftest
  SERVICE_PASSWORD=cadftest
  LOGFILE=/opt/stack/logs/stack.sh.log
  LIBS_FROM_GIT=python-keystoneclient,python-openstackclient

3 . After devstack completes, edit keystone.conf and make (or amend!) the following

  notification_format = cadf
  notification_driver = messaging
  notification_driver = log 

The above enables logging to both ceilometer and keystones log file (apache log)

Generate an event

4. Source admin credentials . openrc admin admin

5. Create a user in keystone (so we create a CADF audit event)

openstack user create cadf_test –os-identity-api-version 3 –os-auth-url http:<your_ip>:5000/v3 –os-default-domain default 6. Last of all, let's view the event ceilometer event-list –query event_type=identity.user.created

inspector/started.1436811133.txt.gz · Last modified: 2015/07/13 18:12 by Luke Hinds