search

jasonish / evebox

Web Based Event Viewer (GUI) for Suricata EVE Events in Elastic Search
https://evebox.org/
MIT License
418 stars 67 forks source link

Support the Security Onion Elasticsearch schema #190

Open jasonish opened 2 years ago

jasonish commented 2 years ago

It could be interesting to support the Security Onion Elasticsearch schema. This is probably only useful if SO is setup to use Suricata for metadata as well.