/Graylog-OPNsense_Extractors

JSON Extractors for Graylog to parse OPNsense firewall logs

MIT LicenseMIT

Graylog-OPNsense_Extractors

Extractors for Graylog to parse OPNsense firewall logs. Should be able to parse most all IPv4 and IPv6 messages. Fork of the original by IRQ10

Updates

  • 2021-06-17: Forked and updated to support OPNsense 21.1.7 message format ("filter: link rule hash to origin")
  • 2021-02-07: Update to support OPNsense 21.1 message format (by @knipp)
  • 2019-08-13: Update to support OPNsense message format change.
  • 2018-06-21: Update to IPv6 ICMP. OPNsense sends "ICMPv6", remove case insensitive regex for better processing when under heavy load.