Wes Lambert b1203cfb9f add initial Strelka ingest config

2020-03-03 21:20:45 +00:00

..

bro_common

parse Bro logs using Elasticsearch ingest node

2019-09-23 16:04:23 -04:00

bro_common_ssl

parse Bro logs using Elasticsearch ingest node

2019-09-23 16:04:23 -04:00

bro_conn

src/dst ip/port fields to ECS

2020-03-02 19:10:18 +00:00

bro_dce_rpc

src/dst ip/port fields to ECS

2020-03-02 19:10:18 +00:00

bro_dhcp

src/dst ip/port fields to ECS

2020-03-02 19:10:18 +00:00

bro_dnp3

src/dst ip/port fields to ECS

2020-03-02 19:10:18 +00:00

bro_dns

src/dst ip/port fields to ECS

2020-03-02 19:10:18 +00:00

bro_dpd

src/dst ip/port fields to ECS

2020-03-02 19:10:18 +00:00

bro_files

src/dst ip/port fields to ECS

2020-03-02 19:10:18 +00:00

bro_ftp

src/dst ip/port fields to ECS

2020-03-02 19:10:18 +00:00

bro_http

src/dst ip/port fields to ECS

2020-03-02 19:10:18 +00:00

bro_intel

src/dst ip/port fields to ECS

2020-03-02 19:10:18 +00:00

bro_irc

src/dst ip/port fields to ECS

2020-03-02 19:10:18 +00:00

bro_kerberos

src/dst ip/port fields to ECS

2020-03-02 19:10:18 +00:00

bro_modbus

src/dst ip/port fields to ECS

2020-03-02 19:10:18 +00:00

bro_mysql

src/dst ip/port fields to ECS

2020-03-02 19:10:18 +00:00

bro_notice

src/dst ip/port fields to ECS

2020-03-02 19:10:18 +00:00

bro_ntlm

src/dst ip/port fields to ECS

2020-03-02 19:10:18 +00:00

bro_pe

parse Bro logs using Elasticsearch ingest node

2019-09-23 16:04:23 -04:00

bro_radius

src/dst ip/port fields to ECS

2020-03-02 19:10:18 +00:00

bro_rdp

src/dst ip/port fields to ECS

2020-03-02 19:10:18 +00:00

bro_rfb

src/dst ip/port fields to ECS

2020-03-02 19:10:18 +00:00

bro_signatures

src/dst ip/port fields to ECS

2020-03-02 19:10:18 +00:00

bro_sip

src/dst ip/port fields to ECS

2020-03-02 19:10:18 +00:00

bro_smb_files

src/dst ip/port fields to ECS

2020-03-02 19:10:18 +00:00

bro_smb_mapping

src/dst ip/port fields to ECS

2020-03-02 19:10:18 +00:00

bro_smtp

src/dst ip/port fields to ECS

2020-03-02 19:10:18 +00:00

bro_snmp

src/dst ip/port fields to ECS

2020-03-02 19:10:18 +00:00

bro_socks

src/dst ip/port fields to ECS

2020-03-02 19:10:18 +00:00

bro_software

src/dst ip/port fields to ECS

2020-03-02 19:10:18 +00:00

bro_ssh

src/dst ip/port fields to ECS

2020-03-02 19:10:18 +00:00

bro_ssl

src/dst ip/port fields to ECS

2020-03-02 19:10:18 +00:00

bro_syslog

src/dst ip/port fields to ECS

2020-03-02 19:10:18 +00:00

bro_tunnel

incoming bro_tunnel logs should go to bro_tunnels

2019-09-24 14:00:22 -04:00

bro_tunnels

src/dst ip/port fields to ECS

2020-03-02 19:10:18 +00:00

bro_weird

src/dst ip/port fields to ECS

2020-03-02 19:10:18 +00:00

bro_x509

parse Bro logs using Elasticsearch ingest node

2019-09-23 16:04:23 -04:00

common

src/dst ip/port fields to ECS

2020-03-02 19:10:18 +00:00

common_nids

parse Bro logs using Elasticsearch ingest node

2019-09-23 16:04:23 -04:00

ossec

parse Bro logs using Elasticsearch ingest node

2019-09-23 16:04:23 -04:00

sguild_nids

parse Bro logs using Elasticsearch ingest node

2019-09-23 16:04:23 -04:00

snort

parse Bro logs using Elasticsearch ingest node

2019-09-23 16:04:23 -04:00

strelka

add initial Strelka ingest config

2020-03-03 21:20:45 +00:00