# Elastic SIEM + snort

**URL:** <https://discuss.elastic.co/t/elastic-siem-snort/199078>\
**Category:** Вопросы на русском языке\
**Created:** [September 11, 2019, 11:58am UTC](https://discuss.elastic.co/t/elastic-siem-snort/199078 "2019-09-11T11:58:37Z")\
**Posts on this page:** 1\
**Showing post:** 2

<div class="post-metadata">

**Author:** ![Igor\_Motov](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/igor_motov/32/45193_2.png) [@Igor\_Motov](https://discuss.elastic.co/u/Igor_Motov)\
**Post date:** [September 11, 2019, 3:44pm UTC](https://discuss.elastic.co/t/elastic-siem-snort/199078/2 "2019-09-11T15:44:41Z")

</div>

Официальной поддержки для snort у нас пока нет. Надо в ручную фильтры в logstash настраивать. Это обсуждалось [тут](https://discuss.elastic.co/t/snort-logs-with-filebeat/177879). Есть filebeat module для [Suricata](https://www.elastic.co/guide/en/beats/filebeat/current/filebeat-module-suricata.html).

---

_[View the full topic](https://discuss.elastic.co/t/elastic-siem-snort/199078)._