Commit graph

58 commits

Author SHA1 Message Date
t3chn0m4g3
0e5986d2df Tweaking
Remove Elasticsearch-Curator in packages, configs and references (BREAKING CHANGE)
Add Index Lifecycle Management in favor of elasticsearch-curator
Point all images to 2203 tags
2022-01-14 15:52:08 +00:00
t3chn0m4g3
788a4c4f98 prepare for new attack map feature
tweaking, cleanup
2022-01-04 16:16:27 +00:00
t3chn0m4g3
68b080a3a8 Work in progress!
This is the foundation for the distributed T-Pot feature,
highly work in progress, only works with local docker image builds,
will be available for prod for upcoming T-Pot 22xx.
2022-01-03 18:24:17 +00:00
t3chn0m4g3
aaccb43471 bump elk stack to 7.16.2
ELK 7.16.2 includes log4j 2.17.0 to address latest issues
2021-12-20 11:17:18 +00:00
t3chn0m4g3
b0339610a2 Prep for Log4Pot integration 2021-12-16 20:25:40 +00:00
t3chn0m4g3
a98b447556 ELK 7.16.1 fixes log4j vulns. 2021-12-13 15:59:48 +00:00
t3chn0m4g3
ce39e1bd4f logstash logging for honeypots 2021-11-19 23:20:13 +00:00
t3chn0m4g3
c9b909e51d finetune new honeypots logging 2021-11-02 19:13:28 +00:00
t3chn0m4g3
ea624351b5 finetuning logstash.conf for new honeypots 2021-10-29 16:28:16 +00:00
t3chn0m4g3
c1eb9f7216 logstash parsing for ddospot, hellpot 2021-10-28 18:57:55 +00:00
t3chn0m4g3
1a844d13ba start integrating new honeypots into ELK 2021-10-27 16:14:52 +00:00
t3chn0m4g3
348a5d572b bump elastic stack to 7.15.1 2021-10-26 13:56:38 +00:00
t3chn0m4g3
9de1bdd0b5 tweaking, bump elastic stack to 7.14.1, rebuild dashboards 2021-09-15 15:58:44 +00:00
t3chn0m4g3
06ef8850fe prep for ELK 7.13.4, start full integration of new honeypots 2021-08-25 15:04:27 +00:00
t3chn0m4g3
4cb84166c5 bump ewsposter to 1.2.0, elk stack to 7.13.2 2021-06-28 16:30:40 +00:00
t3chn0m4g3
f51ab7ec0f prepare to bump elastic stack to 7.13.1 2021-06-10 17:03:22 +00:00
t3chn0m4g3
0c5ab33b8a bump elastic stack to 7.12.1 2021-05-17 16:32:03 +00:00
t3chn0m4g3
92925cecbd bump dicompot to latest master 2020-10-27 21:30:33 +00:00
t3chn0m4g3
54a6a944aa prep for ipphoney 2020-08-25 12:25:59 +00:00
t3chn0m4g3
b86d2c715b prep for ipphoney 2020-08-24 21:36:08 +00:00
t3chn0m4g3
5080151b7c prep for elk 7.9 2020-08-24 10:35:46 +00:00
t3chn0m4g3
16a7cdb975 tweaking
Update logstash config for new Dicompot fields
Revert Dionaea back to 0.8.0, latest master was unstable
2020-06-26 23:48:48 +00:00
t3chn0m4g3
238a08b055 tweaking
cleanup index-pattern
add dicompot log to logstash
2020-06-24 13:21:29 +00:00
t3chn0m4g3
81c6351cf1 fix for keeping daily index 2020-06-23 21:40:38 +00:00
t3chn0m4g3
a396356785 add honeysap logstash config 2020-06-19 22:53:56 +00:00
t3chn0m4g3
2882668826 Add a new elasticsearch honeypot
adjust installer
adjust elasticpot configs to T-Pot's environment
create Dockerfile
adjust logstash config
update Readme
2020-06-17 18:09:59 +00:00
t3chn0m4g3
5a4724bcba elk 7.x dev test 2020-01-31 14:21:55 +00:00
t3chn0m4g3
f110eb08b0 prepare for mailoney json logging 2020-01-22 12:17:30 +00:00
t3chn0m4g3
1d0aad3b34 tweak logstash.conf for citrixhoneypot 2020-01-16 18:04:29 +00:00
t3chn0m4g3
a6ed6613a5 prepare citrixhoneypot for ELK integration 2020-01-16 15:13:58 +00:00
t3chn0m4g3
bf39c0f5b2 bump elastic stack to 6.7.2 2019-08-15 15:38:12 +00:00
t3chn0m4g3
bbf226aeda remove glastopf 2019-06-03 19:57:50 +00:00
t3chn0m4g3
a7e553efe9 still working on fatt 2019-06-03 16:13:58 +00:00
t3chn0m4g3
f870c8e885 continue working on fatt 2019-06-03 10:22:07 +00:00
listbot
c09547e3a4 adjust group and permissions for /data 2019-05-08 11:16:48 +00:00
t3chn0m4g3
e8d8773863 tweaking 2019-03-19 11:08:23 +00:00
t3chn0m4g3
6f30322ad5 prepare for honeypy 2019-03-10 18:15:59 +00:00
listbot
e1fe025dd7 remove fallback 2019-02-28 21:03:07 +00:00
listbot
728607a2da bump elk stack to 6.6.1 2019-02-28 14:52:42 +00:00
t3chn0m4g3
c7873554c3 prepare for adbhoney 2018-12-05 16:59:08 +00:00
t3chn0m4g3
ed921d31f8 cleaning up 2018-11-19 12:34:07 +00:00
t3chn0m4g3
53383f7313 rename fields 2018-11-19 11:33:00 +00:00
t3chn0m4g3
5754c79086 clean up log sources 2018-11-13 15:46:57 +00:00
t3chn0m4g3
992d453b9a medpot tweaking 2018-09-11 07:59:14 +00:00
t3chn0m4g3
f0f6981f34 add medpot to ELK 2018-09-10 01:15:21 +00:00
Marco Ochse
79bb324a4a
rename conpot fields to match index pattern 2018-08-28 13:30:58 +02:00
Marco Ochse
d19d3823f6
prevent status field from being indexed as string 2018-08-28 12:41:11 +02:00
listbot
59c8c5b34c bump ELK to 6.4.0
YES! Index patterns can finally exported through Kibana! A joy to the ELK world :-)
2018-08-24 17:07:00 +00:00
Marco Ochse
1dd57d8022 NGINX logs are in /data/nginx/log/
Syslog should be viewed in Cockpit now, storing events of Syslog in ELK
is ineffective
2018-06-24 03:24:51 +02:00
Marco Ochse
37424eb541 cleanup 2018-05-29 12:06:20 +00:00