Informational

Basic Arkime Installation steps:
1) Download an Arkime build for your OS from http://arkime.com/index.html#downloads
2) Install the downloaded package
3) Configure basic arkime items by running the Configure script (this needs to be done only once)
     /opt/arkime/bin/Configure
4) The Configure script can install elasticsearch for you or you can install yourself
      systemctl start elasticsearch.service
5) Initialize/Upgrade Elasticsearch Arkime configuration
  a) If this is the first install, or want to delete all data
      /opt/arkime/db/db.pl http://ESHOST:9200 init
  b) If this is an update to a moloch/arkime package
      /opt/arkime/db/db.pl http://ESHOST:9200 upgrade
6) Add an admin user if a new install or after an init
      /opt/arkime/bin/arkime_add_user.sh admin "Admin User" THEPASSWORD --admin
7) Start everything
      systemctl start arkimecapture.service
      systemctl start arkimeviewer.service
8) Look at log files for errors
      /opt/arkime/logs/viewer.log
      /opt/arkime/logs/capture.log
9) Visit http://arkimeHOST:8005 with your favorite browser.
      user: admin
      password: THEPASSWORD from step #6

If you want IP -> Geo/ASN to work, you need to setup a maxmind account and the geoipupdate program.
See https://arkime.com/faq#maxmind

Any configuration changes can be made to /opt/arkime/etc/config.ini
See https://arkime.com/faq#moloch-is-not-working for issues

Additional information can be found at:
  * https://arkime.com/faq
  * https://arkime.com/settings

-Erasing Data and Restore Database

./db.pl elasticsearch:9200 init

Commands:
  init                  - Clear ALL elasticsearch moloch data and create schema
  wipe                  - Same as init, but leaves user database untouched
  upgrade               - Upgrade Moloch's schema in elasticsearch from previous versions
  usersexport       - Save the users info to
  usersimport       - Load the users info from
  rotate    - Perform daily maintenance
       type             - Same as rotateIndex in ini file = daily,weekly,monthly
       num              - number indexes to keep