Logstash-configurations

Logstash's configuration files for certain applications/systems.

Each file contains a filter configured to parse the log and transform it into JSON, to be stored in ElasticSearch.

Configurations

• Configuration for RHEL 8/CentOS 8/Rocky Linux 8 (auditd/audisp)
• Configuration for RHEL 7/CentOS 7/Rocky Linux 7 (uAuditAnalyzer)
• Configuration for Firewall (FW-5600)
• Configuration for Kaspersky
• Configuration for Deep Security Manager
• Configuration for F5 (ASM/WAF)

Requirements

• Logstash version 7.x (Tested in that version)
• Text editor

Commercial Support

Tekium is a cybersecurity company specialized in red team and blue team activities based in Mexico, it has clients in the financial, telecom and retail sectors.

Tekium is an active sponsor of the project, and provides commercial support in the case you need it.

For integration with other platforms such as the Elastic stack, SIEMs, managed security providers in-house solutions, or for any other requests for extending current functionality that you wish to see included in future versions, please contact us: info at tekium.mx

For more information, go to: https://www.tekium.mx/