Security-Onion-Solutions securityonion Discussions

Discussions

• 1 You must be logged in to vote

  🙏

  Should I use Security Onion as a syslog server, and how?

  Sazerak asked Mar 17, 2023 in Q&A · Unanswered

  

  

  2
• 1 You must be logged in to vote

  🙏

  securityonion installation method

  mice-love-rice asked Mar 22, 2023 in Q&A · Unanswered

  

  

  1
• 1 You must be logged in to vote

  🙏

  Where should I deploy Security-Onion on the network?

  ighack asked Feb 23, 2023 in Q&A · Unanswered

  

  

  4
• 1 You must be logged in to vote

  🙏

  Custom Elasticsearch pipeline not processing any logs

  launchdaemon asked Jun 1, 2021 in Q&A · Unanswered

  

  

  

  

  6
• 1 You must be logged in to vote

  🙏

  How does elasticsearch ingest work in SO

  stijnpieters asked Dec 21, 2020 in Q&A · Unanswered

  

  

  

  

  4
• 1 You must be logged in to vote

  #️⃣

  Free or expand space on the Onion system root drive

  edbadaaz asked Mar 2, 2023 in General · Unanswered

  

  

  

  

  13
• 1 You must be logged in to vote

  🙏

  Getting 'transport: authentication handshake failed: x509: certificate signed by unknown authority' error on Manager

  ihuxn4hi asked Feb 6, 2023 in Q&A · Unanswered

  

  

  14
• 1 You must be logged in to vote

  🙏

  Parsing Autoruns Logs - Help

  chadstout1939 asked Mar 20, 2023 in Q&A · Unanswered

  

  

  0
• 1 You must be logged in to vote

  🙏

  Editing the suricata.yaml file

  azxqw asked Jan 24, 2021 in Q&A · Unanswered

  

  

  

  

  3
• 1 You must be logged in to vote

  🙏

  Recover data on a separate /nsm RAID array after catastrophic crash and fresh reload

  pimpernoni asked Mar 16, 2023 in Q&A · Unanswered

  

  

  1
• 1 You must be logged in to vote

  🙏

  Read PCAP through stenoread from console

  erik4711 asked Dec 8, 2020 in Q&A · Answered

  

  

  

  

  7
• 1 You must be logged in to vote

  🙏

  CYBR 502 - Setting up Security Onion

  loopieshoes asked Mar 17, 2023 in Q&A · Unanswered

  

  

  1
• 1 You must be logged in to vote

  🙏

  Redis count getting filled up with unprocessed logs

  giveen asked Feb 2, 2023 in Q&A · Unanswered

  

  

  

  

  4
• 1 You must be logged in to vote

  🙏

  Playbook custom filters

  kingtriumph asked Mar 17, 2023 in Q&A · Unanswered

  

  

  0
• 1 You must be logged in to vote

  🙏

  Start with Elastic Fleet now?

  adamphetamine asked Mar 16, 2023 in Q&A · Answered

  

  

  2
• 1 You must be logged in to vote

  🙏

  Distributed install - Missing Grid hosts + DNS Search Domain + OS Patch Update Source Questions

  Sazerak asked Mar 14, 2023 in Q&A · Unanswered

  

  

  3
• 1 You must be logged in to vote

  🙏

  Ingesting suricata logs/alerts from an other host

  KhemaisKebaili asked Mar 13, 2023 in Q&A · Answered

  

  

  4
• 1 You must be logged in to vote

  #️⃣

  Delete old log files

  edbadaaz asked Mar 7, 2023 in General · Answered

  

  

  4
• 2 You must be logged in to vote

  🙏

  Another Unifi/iptables syslog parsing question.

  mtnsec asked Mar 26, 2021 in Q&A · Unanswered

  

  

  

  

  10
• 1 You must be logged in to vote

  🙏

  Filebeat Iptables/Ubiquiti Integration with Kibana

  cchuey asked Mar 2, 2021 in Q&A · Answered

  

  

  

  

  4
• 1 You must be logged in to vote

  🙏

  HELP - I just lost all my data on the Search node!

  ihuxn4hi asked Feb 10, 2023 in Q&A · Unanswered

  

  

  10
• 1 You must be logged in to vote

  🙏

  Problem with valid hit logs from sysmon.

  piolug93 asked Mar 15, 2023 in Q&A · Unanswered

  

  

  0
• 1 You must be logged in to vote

  🙏

  Want to create a pipeline for sending snort logs present on sensor node and displaying snort module name in alerts page

  kunalhiremath asked Feb 23, 2023 in Q&A · Unanswered

  

  

  

  

  7
• 1 You must be logged in to vote

  #️⃣

  Add sum function to OQL?

  pims848 asked Mar 14, 2023 in General · Unanswered

  

  

  0
• 1 You must be logged in to vote

  🙏

  logs retention automatically

  mahmoudelhaj asked Feb 22, 2023 in Q&A · Answered

  

  

  6