Installing Meld on Ubuntu 20: A Step-by-Step Guide

Minemeld is an open-source project from Palo Alto Networks that allows you to take multiple threat feeds, transform them, and output into a single consumable feed for use with your favorite Next Gen Firewall. In this article, we will walk you through the process of installing Meld on Ubuntu 20.

Before you start, make sure your Ubuntu install is up to date by running:

To install Meld, you need to add the following repository and update your package list:

You can also add your user to the minemeld group using the command:

sudo apt install -y gcc git python-minimal python2.7-dev libffi-dev libssl-dev make

Once installed, you will be asked to supply a password during the installation process. This will be your admin account password for the Minemeld application.

To change the default NGINX web server certificates (if you have your own PKI, etc.), replace the following and restart NGINX:

sudo cp ~/cert.key /etc/nginx/minemeld.pem

sudo cp ~/cert.pem /etc/nginx/minemeld.cer

To use Ansible playbook deployment for Ubuntu 18.04, make sure to follow these steps:

You can also take sources and transform them with Minemeld for consumption with security operations tools such as Splunk.

Minemeld is essentially a multiplexer for threat feeds. You can take multiple threat feeds, transform them, set confidence, and output into a single consumable feed. For example, you could transform lists from public sources such as Spamhaus and Abuse.ch and transform them into one list that can be used by your firewall to block those URLs.

In conclusion, installing Meld on Ubuntu 20 is a relatively straightforward process. With these steps, you should be able to get started with using Minemeld for threat feed management and transformation.

Install meld ubuntu 20