Skip to content
AmorikPublic
forked from mike-mitchell/ELK

About

No description, website, or topics provided.

Resources

Stars

0 stars

Watchers

0 watching

Forks

 
 

Latest commit

 

History

4 Commits

Folders and files

NameName
Last commit message
Last commit date
 
 
 
 
 
 

Repository files navigation

ELK5.0 SIEM with Bro IDS

#Setup Set the interface for Bro in the following locations.
Bro:

Edit the "node.cfg" file in the /ELK/conf.d/bro/ directory.
Change the "interface=ens33" to reflect the interface you want to span"

#Usage Run "docker-compose up -d" from the /ELK directory to start the applications.

Browse to Kibana: http://HOST_IP:5601

Configure the index using "bro-*"
Click discover to start browsing the logs.

About

No description, website, or topics provided.

Resources

Stars

0 stars

Watchers

0 watching

Forks

Releases

Packages

Contributors

Languages