search

cleesmith / unifiedbeat

Unifiedbeat reads records from Unified2 binary files generated by network intrusion detection software and indexes the records in Elasticsearch.
MIT License
30 stars 14 forks source link

stay in lockstep with Filebeat #1

Closed cleesmith closed 8 years ago

cleesmith commented 8 years ago

For the most part, try to stay in lockstep with the latest changes/enhancements in Filebeat. Currently, both libbeat and filebeat are changing a lot, but once they settle down then review that code and apply any needed changes to unifiedbeat.

cleesmith commented 8 years ago

It turns out that cloning filebeat was not a good idea, but instead to start with libbeat then add code to handle unified2 files. So this is no longer given the recent changes.