NEW Elastic Agent has official experimental support for pfSense #382
Replies: 5 comments 5 replies
-
@ObjectiveTruth - Thanks! I just took a look and appears they reaped this repo (the dashboards are exactly the same, many of the fields are similar, but it's all good). Hopefully it grows out of the experimental stage and adds support to OPNsense. This project is coming to an end but glad it will be natively supported by @elastic. |
Beta Was this translation helpful? Give feedback.
-
Not to tell you how to use your time, but on a very initial glance, this has a definite feeling of "tick the box" and not actually being too focused on the results. Just the first example I've found so far - assuming UDP syslog for Suricata along with everything else has Known Bad consequences. |
Beta Was this translation helpful? Give feedback.
-
The elastic repo. Again, I’ve only taken a cursory look, maybe it’s documented somewhere.
And yes, I agree an acknowledgement would have been very appropriate. Sadly, I’m not somewhere with any Elastic sales pressure anymore, or I’d have a Pointed Discussion about that.
From: Andrew ***@***.***>
Sent: Saturday, January 1, 2022 10:18 AM
To: pfelk/pfelk ***@***.***>
Cc: Bruce Howells ***@***.***>; Mention ***@***.***>
Subject: Re: [pfelk/pfelk] NEW Elastic Agent has official experimental support for pfSense (Discussion #382)
@BruceHowells <https://github.com/BruceHowells> are you referring to this repo or the elastic integration?
—
Reply to this email directly, view it on GitHub <#382 (reply in thread)> , or unsubscribe <https://github.com/notifications/unsubscribe-auth/ADGH2YSXM2KWYJKTRFRDP73UT5AOPANCNFSM5LCWMDJQ> .
Triage notifications on the go with GitHub Mobile for iOS <https://apps.apple.com/app/apple-store/id1477376905?ct=notification-email&mt=8&pt=524675> or Android <https://play.google.com/store/apps/details?id=com.github.android&referrer=utm_campaign%3Dnotification-email%26utm_medium%3Demail%26utm_source%3Dgithub> .
You are receiving this because you were mentioned. <https://github.com/notifications/beacon/ADGH2YQROYHJS3SSOYRGNZLUT5AOPA5CNFSM5LCWMDJ2YY3PNVWWK3TUL52HS4DFWFCGS43DOVZXG2LPNZBW63LNMVXHJKTDN5WW2ZLOORPWSZGOAAOONKQ.gif> Message ID: ***@***.*** ***@***.***> >
|
Beta Was this translation helpful? Give feedback.
-
Looks like they gave you a shout out
Taken from the pfsense/opnsense elasticsearch integrations page! 👏 |
Beta Was this translation helpful? Give feedback.
-
i was trying the downstream / elastic version a few times now but i'm not sure if it works all that well. please keep your pretty repo aalive, no matter if you can do changes :-) |
Beta Was this translation helpful? Give feedback.
-
Hey All,
I love this project and use it in my homelab. It's been unbelievably useful.
I was playing around with Elasticsearch (upgrading) and I noticed the new pfSense integration being officially supported!
Not sure if this will deprecate this project or if there can be mutual learning from both but though I'd leave it here. Don't shoot the messager! BTW this includes, dashboards
Currently the integration supports parsing the Firewall, Unbound, DHCP Daemon, OpenVPN, IPsec, and HAProxy logs. All other events will be dropped
https://github.com/elastic/integrations/tree/master/packages/pfsense
Beta Was this translation helpful? Give feedback.
All reactions