brocon2015

Configs, scripts, slides from BroCon 2015 Note: In the config files, "deathstar" is the logstash server and the elasticsearch server. "dagobah" is the logstash forwarder/Bro sensor

es_scripts

Misc. Elasticsearch status scripts

config.js

Kibana 3 Config file

elasticsearch.yml

Elasticsearch config file

kibana.service

Centos 7 Systemd service file for Kibana 4

kibana.yml

Kibana 4 config file

kibana3_http.conf

Kibana 3 httpd config file

local.bro

Bro config with json format enabled

logstash-forwarder.conf

Logstash Forwarder (aka Lumberjack) config file

logstash.conf

Logstash config file setup for Bro logging

panaman/brocon2015