bmaeuser/pfsense-analytics
1
0
Fork 0
mirror of https://github.com/lephisto/pfsense-analytics.git synced 2025-12-06 04:19:19 +01:00
Code Issues Packages Projects Releases Wiki Activity

Add more recent Screenshots, clarify MP Sequence

Browse Source
This commit is contained in:
Bastian Mäuser
2019-11-24 16:26:54 +01:00
parent cba243f2a5
commit 552ac225b1
1 changed files with 16 additions and 2 deletions
Download Patch File Download Diff File Expand all files Collapse all files

18
README.md
View File

@@ -98,7 +98,8 @@ your Graylog Instance on http://localhost:9000. Let's see if we can login with u
Next we have to create the Index in Elasticsearch for the pfSense logs in System / Indices Next we have to create the Index in Elasticsearch for the pfSense logs in System / Indices
![Indices](https://www.sysadminsdecuba.com/wp-content/uploads/2018/04/Indice-Pfsense-606x1024.png) ![Index](https://raw.githubusercontent.com/lephisto/pfsense-analytics/master/screenshots/SS_Indexcreation.png)
Index shard 4 and Index replicas 0, the rotation of the Index time index and the retention can be deleted, closure of an index according to the maximum number of indices or doing nothing. In my case, I set it to rotate monthly and eliminate the indexes after 12 months. In short there are many ways to establish the rotation. This index is created immediately. Index shard 4 and Index replicas 0, the rotation of the Index time index and the retention can be deleted, closure of an index according to the maximum number of indices or doing nothing. In my case, I set it to rotate monthly and eliminate the indexes after 12 months. In short there are many ways to establish the rotation. This index is created immediately.
@@ -108,7 +109,20 @@ Index shard 4 and Index replicas 0, the rotation of the Index time index and the
In Graylog go to System->Configurations and: In Graylog go to System->Configurations and:
1. Change the order by Message processors, to have "GeoIP Resolver" on the bottom 1. Change the order by Message processors, to have the following sequence:
```
1. AWS Instance Name Lookup
2. Message Filter Chain
3. Pipeline Processor
4. GeoIP Resolver
```
This should look like:
![Index](https://raw.githubusercontent.com/lephisto/pfsense-analytics/master/screenshots/SS_processorsequence.png)
2. In the Plugins section update enable the Geo-Location Processor 2. In the Plugins section update enable the Geo-Location Processor