Security & Log monitoring/visualization

nagachampa

Hello all - i am looking for some ideas to take my pfsense @ home to the next level. id like to implement some sort of security alerting of the log data as well as possibly send system logs as well for alerting and analysis. a few that initial come to mind may be security onion or elastic. im not familiar with implementing these - was wondering what others are doing for operational and security monitoring and alerting.

kiokoman

zabbix / telegraf / grafana ?
https://forum.netgate.com/topic/152857/telegraf-working-plugin-list
https://forum.netgate.com/topic/152132/grafana-dashboard-using-telegraf-with-additional-plugins/
https://forum.netgate.com/topic/156330/pfsense-firewall-and-suricata-log-to-grafana-with-logstash-worldmap-panel

nagachampa

thanks... ill have to check this out. Looks pretty cool. never used telegraf before.

cburbs

Good place to start as well -

https://www.homelabrat.com/pfsense-dashboard/

I have telegraf setup on the pfsense box.

I host the InfluxDB as a Docker on my unraid server.

Grafana is also ran as a docker on my unraid server.

I use Victors dashboard as of just recently for the grafana part.

nagachampa

thanks for the suggestions - ill check these out.

AKEGEC

I suggest that you only visit Netgate official website.
docs.netgate.com
forum.netgate.com