Skip to content

Latest commit

 

History

History
16 lines (11 loc) · 469 Bytes

README.md

File metadata and controls

16 lines (11 loc) · 469 Bytes

ELK5.0 SIEM with Bro IDS

#Setup Set the interface for Bro in the following locations.
Bro:

Edit the "node.cfg" file in the /ELK/conf.d/bro/ directory.
Change the "interface=ens33" to reflect the interface you want to span"

#Usage Run "docker-compose up -d" from the /ELK directory to start the applications.

Browse to Kibana: http://HOST_IP:5601

Configure the index using "bro-*"
Click discover to start browsing the logs.