Kibana Dashboards

[dougburks]

Hello,

Interesting project you've got here! :)

The Kibana dashboards look very similar to ours in Security Onion. Is that where they came from? If so, may I ask that you provide proper acknowledgement?

Thanks in advance for your consideration!

[mmguero]

Hey, Doug. Malcolm's Kibana dashboards were modeled after Security Onion's but they were totally redone since the zeek log attribute names used by Moloch (which is what I'm normalizing all of our zeek logs to match) are named differently than the names used by Security Onion. But they are definitely inspired by and modeled after Security Onion, for sure, so I absolutely agree we should have an attribution in there. Would a mention in the README.md documentation suffice?

[mmguero]

What about, like:

Many of Malcolm's prebuilt visualizations for Zeek logs are heavily inspired by the excellent Kibana Dashboards that are part of Security Onion.

Or is there some other wording you would prefer?

[mmguero]

By the way, I'm a big fan of your work. Security Onion is outstanding.

[dougburks]

Hey @mmguero ,

That wording sounds fine, thanks!

Perhaps there are other ways we can collaborate in the future.

Thanks!

[mmguero]

No problem, and I apologize for not having that in there originally. I totally agree! I've submitted a minor pull request or two to S.O. in the past (under a different GitHub handle) as I have used it in some analyst training I've done in another project. If I ever come up with any ways our projects can benefit each other I'll reach out. Cheers!