Skip to main content

Start and Stop Trisul

Start/Stop Tasks

This Menu is generally used to start/stop Hub and Probe nodes associated with each context. Each context will have separate Hub and Probe nodes. You can directly start and stop the nodes from Web Interface through this menu.

Describes how you can start and stop Trisul components.

The components

  • Trisul Processes
    • Trisul Hub processes - the database
    • Trisul Probe processes - the analytics
  • WebTrisul - the webserver

Start and Stop Trisul

Start Stop from Web UI

Login as admin to the Trisul UI

👉 Select Context → Admin Tasks → Start/Stop Tasks

startstop menu
Figure: Selecting the Start Stop Menu

Then press Start button on Hub and Probe to bring up the Trisul System.

pressstart Figure: Pressing Start Stop button

Start the Hub First

Both the hub and probe need to be started, Importantly the HUB needs to be started for the probe to connect and start. Hence Start the HUB First, then the PROBE. During STOP follow the reverse, stop the probe first, then the hub.

Hub Options

Click on the three lines button adjacent to the Start/Stop button to access Hub options menu.


Figure: Hub Options Menu

OptionsDescription
View Flusher LogDisplays the log file for the Flusher process, which is responsible for periodically removing outdated data from the Trisul database to maintain data retention policies.
View TRP LogDisplays Trisul Remote Protocol logs queried from hub to Web Trisul.
View Data RetentionAllows administrators to view the current data retention policies configured in Trisul
View System InfoProvides detailed information about the Trisul Hub system, including Name, Kernel, IP Addresses, Version etc
Change Customer LogoEnables customization of the Trisul interface by uploading a custom logo, allowing organizations to brand the platform according to their requirements.
Start IPDR ServiceActivates the IPDR (Internet Protocol Detail Record) service, which collects and processes IPDR data from network devices for querying.

Probe Options

Click on the three lines button adjacent to the Start/Stop button to access Hub options menu.


Figure: Probe Options Menu

OptionsDescription
View RunStats LogDisplays the log file containing runtime statistics for the Trisul Probe, providing insights of uptime and downtime.
View Probe LogShows the main log file for the Trisul Probe, capturing events, errors, and informational messages related to its operation.
Get Interfaces ListRetrieves and displays a list of network interfaces configured on that probe.
Clear All StabbersResets or clears all "stabbers" in the Trisul probe.
How to Start Snort?Provides instructions on configuring and starting Snort with Trisul.
How to Start Suricata?Offers guidelines on integrating and starting Suricata with Trisul.
How to Start Ping Server?Provides instructions on starting the Ping monitor.
Start Ping ServerActivates the Ping Monitor, enabling the Trisul Probe to respond to ICMP echo requests and provide network connectivity verification.
Stop Ping ServerTerminates the Ping Server process, disabling ICMP echo response functionality.

Start and Stop Via Command Line

The CLI tools trisulctl_hub allows you to start and stop easily from the root command line.

$ trisulctl_hub
> restart context default

Start and Stop Web Server - WebTrisul

Web Trisul provides the Web UI and is configured to start automatically.

Start and Stop Webtrisul

Use the normal Linux tools to start and stop Webtrisul. The service name is webtrisuld

systemctl stop webtrisuld
systemctl start webtrisuld