unifiedbeat
unifiedbeat copied to clipboard
cleesmith
Unifiedbeat reads records from Unified2 binary files generated by network intrusion detection software and indexes the records in Elasticsearch.
Hello! I'm struggling to use unifiedbeat properly :( I'm using snort and logstash. To generate the unified2 file I run this snort command: `sudo snort -A console -i enp0s3 -u...
Per original instructions in README: ``` $ curl -XPUT 'http://localhost:9200/_template/unifiedbeat' [email protected] {"error":"Content-Type header [application/x-www-form-urlencoded] is not supported","status":406} ``` Trying to force JSON: ``` $ curl -XPUT 'http://localhost:9200/_template/unifiedbeat' --data "$(cat unifiedbeat.template.json)"...
