StamusNetworks / scirius

Scirius is a web application for Suricata ruleset management and threat hunting.
GNU General Public License v3.0
621 stars 148 forks source link

Supporting Humio and multiple Suricata probes #184

Open Potrik98 opened 5 years ago

Potrik98 commented 5 years ago

Supporting Humio and multiple Suricata probes

Adds support for using Humio as an optional replacement of ElasticSearch

Replicated ElasticSearch functionality in Humio

Humio can be selected as one of the possible backends in settings.py.

Multiprobe support (#178)

Dynamic interaction (required by our multiprobe features)

Bugfixes

Other

jorgenbele commented 5 years ago

Some screenshots (humio as backend)

Alerts activity timeline

screenshot_1564735740

/suricata without selected category

screenshot_1564736531

/suricata with selected category

screenshot_1564735941

/suricata with selected category, ordering by hits

screenshot_1564736027

/suricata with selected category, ordering by -hits

screenshot_1564736074

/rules, ordering by category

screenshot_1564736227

/rules, ordering by -category

screenshot_1564736298

System status

screenshot_1564736166

Alerts trend

screenshot_1564736174