I just configuration Exebox with Elasticsearch and Suricata but Elasticsearch not get event from Suricata so how can I add Suricata event to Elasticsearch ? Please guide me how to add Suricata event to Elasticsearch. Best regards,

How do I adding Suricata events to Elasticsearch

stephenb (Stephen Brown) April 5, 2024, 2:18am 2

Hi @rayobe4014 Welcome to the community...

Perhaps take a look at the following

Filebeat quickstart just substitute the suricata module... follow the steps exactly

The module

Some help here

Topic		Replies	Views
SURICATA LOGS NOT SHOWING UP IN NETWORK EVENTS IN ELASTIC SIEM Endpoint Security	14	2468	February 11, 2022
Filebeat with Suricata module Elasticsearch	1	360	May 19, 2021
Filebeat not sending suricata logs to elasticsearch Beats filebeat	4	258	October 4, 2023
Filebeat suricata Beats beats-module , filebeat	10	920	June 28, 2022
Filebeat Suricata Module "module suricata is configured but has no enabled filesets" Beats beats-module , filebeat	5	2031	May 12, 2023