Skip to content

testsoft.net

security operation control

  • Home
  • Elastic
  • Arcsight

Arcsight

testsoft.net soc monitor view (arcsight)
testsoft.net soc monitor view (arcsight)

ARCSIGHT FLEXCONNECTOR PARSERS (SYSLOG):
1. Apache default logformat with ModSecurity
2. Nginx default logformat with Bitrix
3. IDS Suricata
4. WordPress security events
5. Openvpn events
5. Fail2ban events

Tags

apache arcsight beats centos elasticsearch elk fail2ban filebeat firewall flexconnector install kibana linux logstash modsecurity nginx openvpn parser pattern regex security setup soc suricata syslog vulnerabilities wordpress

Recent Posts

  • Logstash filter and patterns for syslog and filebeat logs receive
  • Vulnerabilities monitoring. Bot activity. February 2021
  • CHAPTER 2. Filebeat Install and config remote log shiping
  • CHAPTER 1. Elasticsearch, logstash, kibana install and config on linux server
  • Multiple logstash input. Syslog and beats log receive

Meta

  • Log in
  • Entries feed
  • Comments feed
  • WordPress.org
testsoft.net
Proudly powered by WordPress.