Uninstall Metron.

In Ambari, select Metron, then under the Service Actions menu, click Delete Service.

When prompted, enter "delete" to confirm deleting the service.

Remove all of the rpms from the old Metron version.

CentOS

From the Ambari node, enter the following to list all of the Metron packages:

rpm -e $(rpm -qa | grep metron)

Remove each of the packages:

rmp remove $PACKAGE_NAME

Ubuntu

From the Ambari node, enter the following to delete all of the Metron packages:

sudo aptitude purge $PACKAGE_NAME

Modify the /etc/yum.repos.d/HCP.repo file with the updated repo version:

vi /etc/yum.repos.d/HCP.repo

Update the HCP.repo file.

CentOS

yum update

Ubuntu

apt-get update

Install the current HCP mpack repo from Release Notes.

For example:

wget http://public-repo-1.hortonworks.com/HCP/centos7/1.x/updates/1.4.2.0/tars/metron/hcp-ambari-mpack-1.4.2.0-18.tar.gz
ambari-server install-mpack --force --mpack=/${MPACK_DOWNLOAD_DIRECTORY}/hcp-ambari-mpack-1.4.2.0-18.tar.gz --verbose

Restart the Ambari server.

ambari-server restart

Re-open Ambari and add back the updated Metron version.

From the Actions menu, click Add Service, then click Metron from the Choose Services page. Ensure Metron is the updated version.

Ambari lists each service on which Metron is dependent.

Click yes to add each dependency.

In Ambari, add back your Metron configuration information in the Property fields.

	Important
	Do not copy and paste into the Metron property fields. You can inadvertently add a special character.

Click Deploy to start the Metron set up.

The process to install, start, and test Metron will take a while.

Restart the Metron services:

In the Management UI, restart the Metron Parsers including Enrichment, Bro, Snort, Yaf, and any other parsers you added previously.

​

Figure 2.1. Management UI

	Note
	Starting the Metron parsers might take a while.

Check the status of the parsers in the Storm UI.

​

Figure 2.2. Storm UI