Can We visualize pcap(packet capture fiels) data use ELK stack?


(Gurram Vinay) #1

Can We visualize pcap(packet capture fiels) -which was passive files data using ELK stack ?


(Thomas Neirynck) #2

Hi @Gurram_Vinay,

I think you will find more luck in the beats, https://discuss.elastic.co/c/beats, or logstash, https://discuss.elastic.co/c/logstash, forums for that. You may find more feedback there on how to index this type of data.


(Gurram Vinay) #3

Thanks, Thomasneirync , really got a lot of answers for trying a lot of learning . Is it possible or not with pcap ? like anyone already was done visualisation using pcap files.


(system) #4

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.