URL shortening services monitoring via ELK

Elastic Security
1

Hey,

I have integrated firewall logs in ELK. I came across some logs which are of URL shorteners eg., bit[.]ly, etc.. the interesting part is when a user clicks on these kinds of URLs we won't know the original URL and we won't have visibility unless and until the user does something on that final URL.

If someone has a solution or a workaround to tackle these kinds of situations please let me know.

Thanks in advance :slight_smile:

2

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.