Alternatives and similar repositories for logstash-linux

Users that are interested in logstash-linux are comparing it to the libraries listed below

• siemonster / logstash
  Example configuration files for Logstash
  ☆44Updated 5 years ago
• Graylog2 / graylog-plugin-threatintel
  Graylog Processing Pipeline functions to enrich log messages with IoC information from threat intelligence databases
  ☆155Updated last year
• HASecuritySolutions / Logstash
  Contains Logstash related content including tons of Logstash configurations
  ☆254Updated 4 years ago
• CityBaseInc / SIAC
  SIAC is an enterprise SIEM built on open-source technology.
  ☆115Updated 6 years ago
• empow / logstash-parsers
  ☆38Updated 5 years ago
• ccdcoe / CDMCS
  Cyber Defence Monitoring Course Suite :: Suricata, Arkime (and others in the past)
  ☆106Updated last year
• rocknsm / rock-dashboards
  Dashboards and loader for ROCK NSM dashboards
  ☆49Updated 2 years ago
• hvandenb / splunk-elasticsearch
  A search command for Splunk which will allow you to search Elastic Search and display the results in the Splunk GUI
  ☆69Updated 2 weeks ago
• BinaryDefense / auto-ossec
  ☆141Updated last year
• Nclose-ZA / elastalert_hive_alerter
  This package allows the use of a custom Elastalert Alert which creates alerts with observables in TheHive using TheHive4Py.
  ☆27Updated 4 years ago
• int13h / squert
  A Simple QUEry and Report Tool
  ☆142Updated 5 years ago
• outcoldman / awesome-splunk
  A curated list of awesome Splunk links
  ☆40Updated 9 years ago
• StamusNetworks / Amsterdam
  Docker based Suricata, Elasticsearch, Logstash, Kibana, Scirius aka SELKS
  ☆184Updated 2 years ago
• cvandeplas / ELK-forensics
  ELK configuration files for Forensic Analysts and Incident Handlers (unmaintained)
  ☆179Updated 6 years ago
• harvard-itsecurity / docker-misp
  Automated Docker MISP container - Malware Information Sharing Platform and Threat Sharing
  ☆175Updated 4 years ago
• bitsofinfo / logstash-modsecurity
  Logstash configuration filter set framework to parse modsecurity audit logs
  ☆112Updated 5 years ago
• danielguerra69 / bro-debian-elasticsearch
  bro on debian with elasticsearch support
  ☆24Updated 8 years ago
• mcholste / elsa
  Enterprise Log Search and Archive
  ☆209Updated 6 years ago
• P4T12ICK / ypsilon
  Automated Use Case Testing
  ☆167Updated 7 years ago
• securityclippy / elasticintel
  Serverless, low cost, threat intel aggregation for enterprise or personal use, backed by ElasticSearch.
  ☆141Updated 2 years ago
• 0xtf / testmynids.org
  A website and framework for testing NIDS detection
  ☆57Updated 3 years ago
• PaloAltoNetworks / minemeld-ansible
  Ansible playbook for installing MineMeld on Linux
  ☆48Updated 4 years ago
• juju4 / ansible-zeek
  setup zeek, previously Bro IDS
  ☆18Updated this week
• IBM / data-import
  ☆48Updated 9 years ago
• alertmanager / alert_manager
  Splunk Alert Manager with advanced reporting on alerts, workflows (modify assignee, status, severity) and auto-resolve features
  ☆81Updated 3 years ago
• ncsa / ossec-tools
  Scripts and integrations for OSSEC
  ☆41Updated 9 years ago
• HKcyberstark / TI_Mod
  Threat Intelligence with Elastic - Minemeld integration with Elasticsearch
  ☆19Updated 4 years ago
• theflakes / Ultimate-Forensics-VM
  Evolving directions on building the best Open Source Forensics VM
  ☆160Updated 7 years ago
• PaloAltoNetworks / minemeld-core
  Engine of MineMeld
  ☆140Updated 2 years ago
• xme / misp-docker
  Docker container for MISP
  ☆96Updated 7 years ago