Security & Log monitoring/visualization

[nagachampa]

Hello all - i am looking for some ideas to take my pfsense @ home to the next level. id like to implement some sort of security alerting of the log data as well as possibly send system logs as well for alerting and analysis. a few that initial come to mind may be security onion or elastic. im not familiar with implementing these - was wondering what others are doing for operational and security monitoring and alerting.

[kiokoman]

zabbix / telegraf / grafana ?
https://forum.netgate.com/topic/152857/telegraf-working-plugin-list
https://forum.netgate.com/topic/152132/grafana-dashboard-using-telegraf-with-additional-plugins/
https://forum.netgate.com/topic/156330/pfsense-firewall-and-suricata-log-to-grafana-with-logstash-worldmap-panel

[nagachampa]

thanks... ill have to check this out. Looks pretty cool. never used telegraf before.

[cburbs]

Good place to start as well -

https://www.homelabrat.com/pfsense-dashboard/

I have telegraf setup on the pfsense box.

I host the InfluxDB as a Docker on my unraid server.

Grafana is also ran as a docker on my unraid server.

I use Victors dashboard as of just recently for the grafana part.

[nagachampa]

thanks for the suggestions - ill check these out.

[AKEGEC]

I suggest that you only visit Netgate official website.
docs.netgate.com
forum.netgate.com