How to add a sensor that reports to the main TPOT install?

[StormzTerminal]

Can anyone help me out with the installation and linking of a tpot sensor to a tpot standard install?

[ChessSpider]

Hi, this fork hasn't been updated in 2 years. I recommend going with the standard version found here: https://github.com/telekom-security/tpotce

Basically what I did was changing logstash to output to the main elasticsearch instance. I dont know if the standard version already his multi-sensor support. If not.. that's the rabbithole I went through. Perhaps it helps you

[StormzTerminal]

Thank you. Should I remove some of the services that run inside of the standard install? I had only planned on using 4GB of ram for the sensor.

[ChessSpider]

the most resource intensive parts of the installation will be elasticsearch and kibana of the elk-stack.

These can be removed for the sensors.

Logstash wil then have to be configured to push the logs to another elasticsearch isntance.

Likely you can still use my changes for inspiration