Graylog2 / graylog-plugin-sampleLinks
Sample plugin for Graylog 2.0 including web ui parts.
☆10Updated 2 years ago
Alternatives and similar repositories for graylog-plugin-sample
Users that are interested in graylog-plugin-sample are comparing it to the libraries listed below
Sorting:
- Engine of MineMeld☆141Updated 2 years ago
- Splunk App for Linux Auditd☆57Updated 4 years ago
- Configuration for a Palo Alto Networks fed ELK Stack with Visualizations☆75Updated 6 years ago
- A search command for Splunk which will allow you to search Elastic Search and display the results in the Splunk GUI☆70Updated 5 months ago
- Contains Logstash related content including tons of Logstash configurations☆254Updated 4 years ago
- ☆38Updated 6 years ago
- Graylog Processing Pipeline functions to enrich log messages with IoC information from threat intelligence databases☆155Updated last year
- Docker files for building Zeek.☆88Updated 2 years ago
- Bro script package to create JSON formatted logs to stream into data analysis systems.☆30Updated 2 months ago
- Plugin providing native AF_Packet support for Zeek.☆33Updated 3 months ago
- Alert notification plugin for Graylog to generate log messages from alerts☆27Updated 3 weeks ago
- Main MineMeld documentation repo☆380Updated 8 years ago
- WebUI of MineMeld☆43Updated 2 years ago
- Palo Alto Networks Rule Parser☆16Updated 9 years ago
- Suricata Extreme Performance Tuning guide☆213Updated 7 years ago
- Time-Machine Dynamic Bulk Packet Recorder☆36Updated 9 months ago
- PANW Firewall Visualisations using Elastic Stack☆91Updated 2 years ago
- Stream Lookup function for GrayLog2 Pipeline Processor☆14Updated 4 years ago
- Splunk Alert Manager with advanced reporting on alerts, workflows (modify assignee, status, severity) and auto-resolve features☆83Updated 3 years ago
- Threat Intelligence with Elastic - Minemeld integration with Elasticsearch☆19Updated 4 years ago
- Translate an ECS mapping CSV to starter pipelines for Beats, Elasticsearch or Logstash☆54Updated 3 years ago
- SELinux Policy for Splunk☆58Updated 6 years ago
- Palo Alto Networks App for Splunk leverages the data visibility provided by Palo Alto Networks next-generation firewalls and endpoint sec…☆108Updated last year
- ☆78Updated 2 weeks ago
- An open standard for hashing network flows into identifiers, a.k.a "Community IDs".☆193Updated last year
- Ansible playbook for installing MineMeld on Linux☆48Updated 4 years ago
- Mapping Corelight or Zeek data to Elastic Common Schema fields☆34Updated 3 months ago
- A Search command to explore Elasticsearch data within Splunk.☆40Updated 7 years ago
- No elephant flows - flow shunting for Arista switches using EOS API☆27Updated 4 years ago
- Zeek support for Community ID flow hashing.☆37Updated 2 years ago