HELK

HELK copied to clipboard

how to start and/or restart the HELK

1

I am new to docker thing, how to start and/or restart the HELK ? Thanks

tamermh

**What is this PR for?** Simple typo I noticed during installation - "serivce" to "service" **What type of PR is it?** Bug fix/Typo fix **How should this be tested?** No...

vaelwolf

Suggestion to add Praeco as elastalert visualizer

13

Hi there, is anybody working on adding Praeco to manage and visualize the Alert rules? There is a full docker configuration here: https://github.com/johnsusek/praeco My understanding is that you can simply...

priamai

Not able to expose elasticsearch port 9200 externally(outside docker) and connect

5

#### Describe the problem I'm trying to send logs from the Office 365 using the o365 filebeat to the ElasticSearch. Filebeat gets the data from o365 but not able to...

ashishmgupta

Jupyter token 'Invalid credentials'

2

#### Describe the problem Freshly HELK installed, logging into jupyter, token not accepted. Says 'Invalid credentials' #### Provide the output of the following commands Invalid credentials

saroyaj

Install never completes in log - hangs on Kibana

8

#### Describe the problem I've tried running clean installs 3-4 times with the same issue on ubuntu 20.04.2 LTS (Focal Fossa) - Tried installing versions 2, and 4 of script...

SecOpsWarrior

Is there any way to edit max_query_size

2

In helk_elastalert there is a directory called rules there are 800 something rules i have to add max_query_size parameter is there any option to add the above parameter

aniketpant1

NOT Fixed: https://github.com/Cyb3rWard0g/HELK/issues/493

ghost

Could not run HELK via docker-compose file helk-kibana-analysis-alert-basic.yml (Error Code:127)

1

SO:  Problem: Good afternoon, I am having trouble installing ELK on a clean install, error appears "* ERROR: Could not run HELK via docker-compose file helk-kibana-analysis-alert-basic.yml (Error Code: 127)."...

hakavod

How to integrate custom grok filters in this stack?

2

Hi, thanks for providing this great boilerplate. I've just installed everything 2 days ago, regarding versions. I've managed to forward syslogs from my log-aggregator to Kafka - and I'm able...

ordin2342