SELKS

SELKS copied to clipboard

Keep getting the same problem with suricata

13

Hi guys. I keep getting the same problem with suricata. Imagine if i start the suricata service today. It runs all ok, until let´s say tomorrow morning. When i go...

ngms17

Kibana did not load properly. Check the server output for more information

24

After SELKS 6.0 install and selks-upgrade_stamus  ELK stack 7.8.0

MaratKzn

How many Gbs is recomended to use moloch

1

I note that using moloch the diks fills up pretty fast. Instead, if i use the first option, the disk fills up pretty slowly. So how many Gb are recommended...

ngms17

Hola Tengo configurado packet sniffer y esta haciendo streaming al host donde tengo configurado el selkis, pero no me esta capturando los paquetes, si que es cierto que en mikrotik...

netermin

Securing Elasticsearch (X-Pack enabled)

92

Hi, Is there an "easy way" with SELKS to secure Elasticsearch node to star receiving data securely from beats like Winlogbeat? By "easy way" I mean an easier way, other...

ManuelFFF

Elastalert

2

Is it possible to integrate ElastAlert on your solution?

ngms17

elasticsearch Unassigned shards and "kernel captured packets" no data available

5

please help me .thanx "kernel captured packets" no data available : i requested : GET /rest/rules/es/logstash_eve/?from_date=1604380909615&value=stats.tcp.reassembly_memuse&hosts=xxxx-xxxx HTTP 200 OK Allow: GET, HEAD, OPTIONS Content-Type: application/json Vary: Accept { "from_date": 1604380909615,...

Product

Kibana - Wrong Matching name

1

Hello, there is a wrong name on the kibana dashboard for SN-Alerts for the dashboard edit/SN-Alert-Top20Signatures and it's name "SN-ThreatHunt-ALERTS-Top100Signatures" :) The Buckets size is 100 so i think you...

b4b857f6ee

Encrypted LVM SELKS6

1

Hi, I decided to try the LVM encryption included in the SELKS 6 installer. Everything was working fine, but now I need to remove the encryption from the entire disk,...

ManuelFFF

Personal account for Kibana and Moloch for each user

1

Is it possible to log into Kibana and Moloch with the same account used for scirius transparently? For instance I logged as Antony , then opened Moloch, Kibana, made my...

VN1977