Bro-IDS Logstash Parsing

I have spent the past several days working with Bro-IDS and Logstash parsing and wanted to share this with anyone else who may be doing the same and needs some decent parsing. Some pieces of this I have taken from Continue reading

IP Reputation Lookups with Logstash

I had a great question yesterday about how to configure Logstash to integrate IP reputation lookups within Logstash and Kibana without having to copy and paste an IP address and etc. I thought this was a great idea and one that Continue reading

Suricata IDS/IPS VMXNET3

As part of a bigger post coming soon I have been using Suricata IDS and my Logstash server has been getting hammered and unable to keep up (running a single node setup) but finally figured out why this was happening so I Continue reading

Graylog2 v0.90 Install Script

In the past I have been updating the auto install scripts for Graylog2 and updating the original post each time. However here on out I will be creating new posts for each release in hopes of keeping it much cleaner. Continue reading

IPTables Cluster Script

I have been working on some interesting virtualized networking setups (More on this in another post soon) and needed a way to configure IPTables rules on all nodes which are to be considered part of a cluster (HA) setup. What I wanted Continue reading

vCenter 5.5U2 Upgrade on VCSA

So I decided to upgrade my vCenter 5.5U1 VCSA to the latest vCenter 5.5U2 release yesterday and it has been a complete disaster at this point. vCenter continually crashes every few minutes now. I was just poking through logs and Continue reading

VMworld 2014 – It is TIME!!!

The time has finally come for VMworld 2014 – US in San Francisco. I know I am very excited this year as well I am sure everyone else (20k+) is as well. I am looking forward to catching up with Continue reading

VMware NSX WebUI Sync Issue

So I recently had an issue when trying to create some new tenant networks and had a very strange issue. When creating the Logical Switches within NSX I was receiving a timeout error stating that the they had not been Continue reading

vSphere – Enable SSH using PowerCLI

In case you have the need to enable SSH, set SSH service to start on boot and also set the firewall rule to allow ALL IPs you can use the following PowerCLI script. If you need to lock down the Continue reading

VMware NSX 6.0.5 Upgrade Tips

So I performed my first NSX upgrade today which overall was not too bad but it did take quite a long time. I ran into a few gotchas along the way and figured that I would share those. Now if Continue reading