Update Screenshots
@@ -1,2 +1,2 @@
|
|||||||
curl --output /etc/graylog/server/mm.tar.gz "https://download.maxmind.com/app/geoip_download_by_token?edition_id=GeoLite2-City&date=20210216&suffix=tar.gz&token=v2.local.fmoWF6Zlm-IwsSmz5Z5RM1NJTVkvOYyhvxM5724xotyEFFb7M2E5vXz_hcUKWdX7XKcIEGiSSC9oTeDV2UlZ0u5ZsEsYXYTHLYvdm5FZ9EOE0K6guo3eqLkcRw26lRqSgecPEG3J9wmOWbD69DzP4kCL4D-30v5CJugV-I0OALpQxrsOm4hfSETQXeXyt8YK26T76A"
|
curl -o /etc/graylog/server/mm.tar.gz 'https://download.maxmind.com/app/geoip_download?edition_id=GeoLite2-City&license_key=BmvuNbtVQPvsHYNj&suffix=tar.gz'
|
||||||
tar zxvf /etc/graylog/server/mm.tar.gz -C /etc/graylog/server/ --strip-components=1
|
tar zxvf /etc/graylog/server/mm.tar.gz -C /etc/graylog/server/ --strip-components=1
|
||||||
|
|||||||
@@ -82,7 +82,7 @@ A salt for encrypting your graylog passwords
|
|||||||
- GRAYLOG_PASSWORD_SECRET (Change that _now_)
|
- GRAYLOG_PASSWORD_SECRET (Change that _now_)
|
||||||
|
|
||||||
|
|
||||||
Edit Docker/graylog/getGeo.sh and insert _your_ tokenized Downloadlink of the Maxmind GeoIP Database. Create an account on https://www.maxmind.com/en/account/login and go to "My Account -> Download Files -> GeoLite2 City" and copy the Link "Download GZIP" to your getGeo.sh File. If you don't do that the geolookup feature for IP Addresses won't work.
|
Edit `Docker/graylog/getGeo.sh` and insert _your_ license Key for the Maxmind GeoIP Database. Create an account on https://www.maxmind.com/en/account/login and go to "My Account -> Manage License Keys -> Generate new License key" and copy the that Key to the placeholder in your getGeo.sh File. If you don't do that the geolookup feature for IP Addresses won't work.
|
||||||
|
|
||||||
Finally, spin up the stack with:
|
Finally, spin up the stack with:
|
||||||
|
|
||||||
@@ -119,7 +119,7 @@ Next we have to create the Index in Elasticsearch for the pfSense logs in System
|
|||||||
|
|
||||||
Index shard 4 and Index replicas 0, the rotation of the Index time index and the retention can be deleted, closure of an index according to the maximum number of indices or doing nothing. In my case, I set it to rotate monthly and eliminate the indexes after 12 months. In short there are many ways to establish the rotation. This index is created immediately.
|
Index shard 4 and Index replicas 0, the rotation of the Index time index and the retention can be deleted, closure of an index according to the maximum number of indices or doing nothing. In my case, I set it to rotate monthly and eliminate the indexes after 12 months. In short there are many ways to establish the rotation. This index is created immediately.
|
||||||
|
|
||||||

|

|
||||||
|
|
||||||
# 3. GeoIP Plugin activation
|
# 3. GeoIP Plugin activation
|
||||||
|
|
||||||
@@ -150,11 +150,11 @@ This content pack includes Input rsyslog type , extractors, lookup tables, Data
|
|||||||
|
|
||||||
We can take it from the Git directory or sideload it from github to the Workstation you do the deployment on:
|
We can take it from the Git directory or sideload it from github to the Workstation you do the deployment on:
|
||||||
|
|
||||||
https://raw.githubusercontent.com/lephisto/pfsense-analytics/master/pfsense_content_pack/graylog3/pfanalytics.json
|
https://raw.githubusercontent.com/lephisto/pfsense-analytics/master/pfsense_content_pack/graylog4/pfanalytics.json
|
||||||
|
|
||||||
Once it's uploaded, press the Install button. If everthing went well it should look like:
|
Once it's uploaded, press the Install button. If everthing went well it should look like:
|
||||||
|
|
||||||

|

|
||||||
|
|
||||||
Note the "pfintel" on the bottom of the list.
|
Note the "pfintel" on the bottom of the list.
|
||||||
|
|
||||||
|
|||||||
BIN
screenshots/SS_Contentpacks.png
Normal file
|
After Width: | Height: | Size: 176 KiB |
|
Before Width: | Height: | Size: 90 KiB After Width: | Height: | Size: 168 KiB |
BIN
screenshots/SS_Indexcreation4.png
Normal file
|
After Width: | Height: | Size: 178 KiB |
BIN
screenshots/SS_Indexcreation_done.png
Normal file
|
After Width: | Height: | Size: 30 KiB |
|
Before Width: | Height: | Size: 36 KiB After Width: | Height: | Size: 28 KiB |