oxi-git / dpot

A centralized system of distributed honeypots based on the ELK Stack and Docker
Apache License 2.0
1 stars 0 forks source link

Tpot Deployment cross datacenters #1

Open neginsadeghi opened 2 years ago

neginsadeghi commented 2 years ago

Hello.

Consider that I have Tpot instances on multiple data centers ( Ovh, Hetzener, Worldstream, etc ... ) Now I need a central place for gathering data from all of the instances.

We can say it in this way : Multiple agents ( sender ) and one server ( receiver )

What we can do to achieve this ?

oxi-git commented 2 years ago

Hello there,

What you need is a centralized elk stack (or opensearch) and many sensors equipped with FileBeat.

I think it's a lot cleaner to implement this architecture instead of installing tpot and then redirect the logs in order to collect the data all in one place.

You could youse my repo as an example.

Im hoping this helps you.