elastdocker
pfelk
elastdocker | pfelk | |
---|---|---|
5 | 23 | |
1,716 | 985 | |
- | 0.8% | |
4.6 | 9.1 | |
7 months ago | 3 days ago | |
Dockerfile | Shell | |
MIT License | GNU General Public License v3.0 or later |
Stars - the number of stars that a project has on GitHub. Growth - month over month growth in stars.
Activity is a relative number indicating how actively a project is being developed. Recent commits have higher weight than older ones.
For example, an activity of 9.0 indicates that a project is amongst the top 10% of the most actively developed projects that we are tracking.
elastdocker
-
Filebeat, Elasticsearch and Kibana with Docker Compose
https://github.com/sherifabdlnaby/elastdocker I use this typically.
- Elastdocker Updated – Supports Elasticsearch v8.0 and ELK on Docker, with pre-configured security and most features enabled. Up with a single command.
pfelk
-
Best way to use my SFF PCs
I understood that OPNsense runs fine with 8GB RAM and a relatively weak CPU, but then I saw this, which provides extended search and visualisation features to help you use the data created by OPNsense, and it recommends 32GB. pfelk/pfelk: pfSense/OPNsense + Elastic Stack (github.com)
-
pfELK won't receive syslog data on port 5140
I've carefully followed the manual Ubuntu setup of pfelk from https://github.com/pfelk/pfelk/tree/main, the instructions are pretty good. I did everything manually except for the dashboards, used the handy script. I've also configured syslog to remote log everything to it, plus unbound data.
- SIEM or Dashboards
- Logs to LogStash then to Sentinel. Parsing problem.
-
i'm looking for an PFsense app that i Can use it with splunk, i find only one but it miss Many options
I've been using pfElk. You could probably use some of the parsers from there to parse things yourself in Splunk.
-
My growing homelab, CS student in Germany
On the left is a Kibana dashboard, showing information from the firewall (blocks/passes, connection type, etc). I use pfelk and customised the dashboard and the indexing a bit to suit my needs.
- PfSense Guide for Viewing Traffic History?
-
Running a private mail server for six years, easy peasy
> So many chinese and russians IPs...
And Korean, and Dutch, I recall significant from Central America.
For anyone interested in what Geo's appear to be attacking you, and is a noob like me: https://github.com/pfelk/pfelk is really cool.
- How to best visualize Suricata alerts in pfsense
What are some alternatives?
docker-elk - The Elastic stack (ELK) powered by Docker and Compose.
ElastiFlow - Network flow analytics (Netflow, sFlow and IPFIX) with the Elastic Stack
docker-based-monitoring-stack-boilerplate - This is a boilerplate for docker based monitoring stack.
make-my-server - Docker Compose with Traefik and lots of services
pfSense-Dashboard - A functional and useful dashboard for pfSense that utilizes influxdb, grafana and telegraf
ansible-collection-elk - The Elastic stack (ELK) powered by Ansible
HELK - The Hunting ELK
docker-magento2 - Magento 2.4, Apache 2.4, PHP 7.4, MariaDB 10.4.16, Elasticsearch 7.6.0, Varnish 6.4.0
docker-compose-macvlan - Docker-compose macvlan example - container using different IP address than host.
fast-geoip - A faster & low-memory replacement for geoip-lite, a node library that maps IPs to geographical information