Skip to content

EveBox v0.3.0

Choose a tag to compare

@jasonish jasonish released this 30 Jul 17:12

Depends on Elastic Search 1.3.0+.

  • Use Groovy for Elastic Search scripting. Works with the default configuration now (no need to enable dynamic scripting).
  • Use the new top hits aggregation in ES 1.3 to limit the number of trips to the ES to build an aggregate view.
  • Display packet and payload data now available in Suricata eve logs (Only in Suricata git builds as of now).