Recent Posts

VMware NSX - L2 Bridge Gateway Whiteboarding

less than 1 minute read

I wanted to share this whiteboarding session as my first attempt. I am trying a new platform that I have been wanting to explore and hope it is beneficial. I...

PFSense Snort Logstash

less than 1 minute read

I have been working on getting some detailed logging from Snort logs generated through PFSense and thought I would share them. This can also be modified to w...

VMware NSX Firewall Logging with Logstash

less than 1 minute read

So the past day or so I have been working on getting some good detail from my NSX Edge’s (ESG and DLR) and I have been able to get them working very well. Th...

Bro-IDS Logstash Parsing

less than 1 minute read

I have spent the past several days working with Bro-IDS and Logstash parsing and wanted to share this with anyone else who may be doing the same and needs so...

IP Reputation Lookups with Logstash

1 minute read

I had a great question yesterday about how to configure Logstash to integrate IP reputation lookups within Logstash and Kibana without having to copy and pas...