Skip to content

Latest commit

 

History

277 Commits

Folders and files

NameName
Last commit message
Last commit date
 
 
 
 
 
 
 
 
 
 

Repository files navigation

Corelight ECS Logstash Pipeline

The repository is compromised of Logstash Pipeline files required to be used with the installer script in the repository
https://github.com/corelight/ecs-templates

The installer in that repository will download the files from this repository therefore using this repository directly is not required nor recommended.

License

The files and automation script are open-source under a BSD license. See COPYINGfor details.

Github Repository Definitions

Elasticsearch templates

https://github.com/corelight/ecs-templates

  • Elasticsearch index templates, component templates, ilm policies, settings, and mappings
  • Install Script

Logstash Pipelines (This Repository)

https://github.com/corelight/ecs-logstash-mappings

  • Logstash pipeline configurations

Ingest Pipelines

https://github.com/corelight/ecs-mapping

  • Ingest pipeline configurations

Kibana Dashboards and Visualizations

https://github.com/corelight/ecs-dashboards

Kibana Security Rules and Alerts

https://github.com/corelight/Elasticsearch_rules

About

Mapping Corelight or Zeek data to Elastic Common Schema logs

Resources

Stars

11 stars

Watchers

5 watching

Forks

Releases

Packages

Contributors