VMware NSX Firewall Logging with Logstash
So the past day or so I have been working on getting some good detail from my NSX Edge’s (ESG and DLR) and I have been able to get them working very well. Th...
Everything Should Be Virtual - Virtualization, Automation, Infrastructure
Recent Posts
Bro-IDS Logstash Parsing
I have spent the past several days working with Bro-IDS and Logstash parsing and wanted to share this with anyone else who may be doing the same and needs so...
IP Reputation Lookups with Logstash
I had a great question yesterday about how to configure Logstash to integrate IP reputation lookups within Logstash and Kibana without having to copy and pas...
Suricata IDS/IPS VMXNET3
As part of a bigger post coming soon I have been using Suricata IDS and my Logstash server has been getting hammered and unable to keep up (running a single ...
Graylog2 v0.90 Install Script
In the past I have been updating the auto install scripts for Graylog2 and updating the original post each time. However here on out I will be creating new p...