I just configuration Exebox with Elasticsearch and Suricata but Elasticsearch not get event from Suricata so how can I add Suricata event to Elasticsearch ? Please guide me how to add Suricata event to Elasticsearch. Best regards,

Discuss the Elastic Stack

How do I adding Suricata events to Elasticsearch

Elastic Security SIEM

stephenb (Stephen Brown) April 5, 2024, 2:18am 2

Hi @rayobe4014 Welcome to the community...

Perhaps take a look at the following

Filebeat quickstart just substitute the suricata module... follow the steps exactly

The module

Some help here

Elasticsearch is a trademark of Elasticsearch BV, registered in the U.S. and in other countries
Trademarks
Terms
Privacy
Brand
Code of Conduct

Apache, Apache Lucene, Apache Hadoop, Hadoop, HDFS and the yellow elephant logo are trademarks of the Apache Software Foundation in the United States and/or other countries.