Sending Firewall Log to Webserver
-
I want to build my own personal website to build live data analysis on, based on connections hitting my WAN side of Pfsense. For example resolving the identity and or Geo location to create a table and an "attack map"
How can I simply have pfsense upload Log files to my webserver every x minutes or seconds? Is it still ok just pointing pfsense to my webserver in the remote log settings? Or do I need a shallot server running?
Has anyone else done this?
-
So you want an elk stack??
-
You could also look into this:
https://forum.pfsense.org/index.php?topic=120972.0
BTW, johnpoz, its grown immensely since you last saw it as well, checkout the static demo:
http://black-knights.org/pfmonitor/demo/index.php?task=home
