Variable/event kind fix

rocknsm / rock-dashboards

Dashboards and loader for ROCK NSM dashboards

http://rocknsm.io

Apache License 2.0

47 stars 17 forks source link

Variable/event kind fix #54

Closed peasead closed 4 years ago

peasead commented 4 years ago

Updated the Suricata alert Logstash pipeline to populate the SIEM External Alert visualization.

Updated the Suricata dashboards to reflect the new data pipeline. This was tested using this repo and the import shell script.

On a pre-built ROCK sensor, I had to refresh the index patterns, but I'm not sure if these are integrated into the build, that will be required. Interested to test this in the Test ISO.

peasead commented 4 years ago

Don’t merge these. I need to test some things again. Not near my computer.