Installing Logstash on OPNsense

« previous next »

Print

Pages: [1]

Author Topic: Installing Logstash on OPNsense (Read 3777 times)

spetrillo

Hero Member
Posts: 721
Karma: 8

Installing Logstash on OPNsense

« on: June 26, 2019, 04:28:46 am »

Has anyone been able to install an up to date rev of Logstash on OPNsense. I am trying to do this, and then have ES and Kibana on a separate Windows PC. The goal is to push all logs and data, so I can visualize it with Kibana.

I am new to FreeBSD and coming from Windows.

Logged

mimugmail

Hero Member
Posts: 6766
Karma: 494

Re: Installing Logstash on OPNsense

« Reply #1 on: June 26, 2019, 06:37:53 am »

Why do you need logstash on the Firewall itself?
You have to export the logs, e.g. via Syslog to an exernal logstash instance.

Logged

WWW: www.routerperformance.net
Support plans: https://www.max-it.de/en/it-services/opnsense/
Commercial Plugins (German): https://opnsense.max-it.de/

spetrillo

Hero Member
Posts: 721
Karma: 8

Re: Installing Logstash on OPNsense

« Reply #2 on: June 26, 2019, 04:22:06 pm »

It is my understanding that Surricata logs cannot go to syslog. Is that incorrect?

Logged

mimugmail

Hero Member
Posts: 6766
Karma: 494

Re: Installing Logstash on OPNsense

« Reply #3 on: June 26, 2019, 05:20:29 pm »

pkg install beats

... use filebeat ...

Logged

WWW: www.routerperformance.net
Support plans: https://www.max-it.de/en/it-services/opnsense/
Commercial Plugins (German): https://opnsense.max-it.de/

spetrillo

Hero Member
Posts: 721
Karma: 8

Re: Installing Logstash on OPNsense

« Reply #4 on: June 27, 2019, 03:29:26 pm »

Ahhh got it...can we also configure the other Beats, like Metric/Packet/Heart on OPNsense?

Logged

Print

Pages: [1]

« previous next »