Zeek with ELK
sec-x sec-x <[email protected]> Sun, 5 Jan 2020 17:32:48 +0200
| Newsgroups | gmane.comp.security.detection.bro |
|---|---|
| Message-ID | <CAGj8hdhw+0ROTtYMnmdE9KMu1DYC1zsfC3_embvTuVDE3ZdNjA@mail.gmail.com> |
Hi, I recently used zeek IDS on FreeBSD 12.1 - Default Policy (GetTraffic from TAP on the network) and i want to send all the logs to ELK in realtime. I saw Filebeat ports on BSD is old and has problems. How can i send the logs from the BSD to the Elastic (what is the correct/best way)? Thanks, CM. _______________________________________________ Zeek mailing list [email protected] http://mailman.ICSI.Berkeley.EDU/mailman/listinfo/zeek