Author Topic: Simple Firewall Log Viewer (Read 717 times)

jhw · « **on:** June 05, 2024, 03:23:17 pm »

Hello,

is there a simple, small solution for analysing the firewall logs?

I am happy with features of the Live View but could not find a way to display events of the past. The Plain View does not offer the filter features of Live View.

I searched the forum and the web and found a lot about SIEM / SOC posts with for example pfelk which needs 16 GB RAM minimum.

Regards,
Jan

sorano · « **Reply #1 on:** June 05, 2024, 07:37:21 pm »

You could take a look at LNAV:

https://lnav.org/

jhw · « **Reply #2 on:** June 06, 2024, 10:06:13 am »

Thanks, sorano.

If you have already done this, could you explain a bit further. Do you suggest to install it on the OPNsense like described in this post (https://forum.opnsense.org/index.php?topic=12325.0) and point it to /var/log/filter?

Regards,
Jan

Author Topic: Simple Firewall Log Viewer (Read 717 times)

jhw

Simple Firewall Log Viewer

sorano

Re: Simple Firewall Log Viewer

jhw

Re: Simple Firewall Log Viewer