Your browser does not seem to support JavaScript. As a result, your viewing experience will be diminished, and you have been placed in read-only mode.

Please download a browser that supports JavaScript, or enable it if it's disabled (i.e. NoScript).

Statistics module Suricata/Snort??

IDS/IPS

2

2

17

Log in to reply

C
Cool_Corona last edited by

Would it be possible to create a statistics module that details what ever is in the logs??

Like:

Alerts/blocks pr. day/week/mth/quarter/yr??

Most alerts/blocks pr. rule pr. IP/alias?

Things like that.
1 Reply Last reply
Reply Quote 0
bmeeks last edited by

There are several third-party tools available that do things like that (including fancy charts). Check out an ELK or Grafana setup.

Here is a link to a recent thread posted by @kiokoman detailing his Grafana setup: https://forum.netgate.com/topic/156330/pfsense-firewall-and-suricata-log-to-grafana-with-logstash-worldmap-panel.
1 Reply Last reply
Reply Quote 0

Products

Services

Support

News

Resources

Company

Our Mission

We provide leading-edge network security at a fair price - regardless of organizational size or network sophistication. We believe that an open-source security model offers disruptive pricing along with the agility required to quickly address emerging threats.

Subscribe to our Newsletter

Product information, software announcements, and special offers. See our newsletter archive to sign up for future newsletters and to read past announcements.

© 2021 Rubicon Communications, LLC | Privacy Policy

1 / 1