logstash

The Elastic stack (ELK) powered by Docker and Compose.

A curated list of the most important and useful resources about elasticsearch: articles, videos, blogs, tips and tricks, use cases. All about Elasticsearch!

The Hunting ELK

Network flow analytics (Netflow, sFlow and IPFIX) with the Elastic Stack

Logback JSON encoder and appenders

some personally made dockerfile

Elasticsearch, Logstash, Kibana (ELK) Docker image

Red Team's SIEM - tool for Red Teams used for tracking and alarming about Blue Team activities as well as better usability in long term operations.

Elassandra = Elasticsearch + Apache Cassandra

Kibana plugin to view, search & live tail log events

Create actionable data from your Vulnerability Scans

🐳 Elastic Stack (ELK) on Docker, preconfigured Out of the Box. Enables Logging, Metrics, APM, Alerting, ML, and SIEM features. Up with a Single Command. Now Supports v8.0!

搭建ELK日志分析平台。

go-stash is a high performance, free and open source server-side data processing pipeline that ingests data from Kafka, processes it, and then sends it to ElasticSearch.

使用 golang 模仿的 Logstash。用于消费 Kafka 数据，处理后写入 ES、Clickhouse 等。

pfSense/OPNsense + Elastic Stack

Docker host and container monitoring, logging and alerting out of the box using cAdvisor, Prometheus, Grafana for monitoring, Elasticsearch, Kibana and Logstash for logging and elastalert and Alertmanager for alerting.

JustLog brings logging on iOS to the next level. It supports console, file and remote Logstash logging via TCP socket with no effort. Support for logz.io available.

用java实现一下Logstash的几个常用input/filter/output, 希望能有效率上面的大提升. 现在我们迁移到golang了 https://github.com/childe/gohangout

Ruby logger that writes logstash events

Many samples in different branches that shows how to create microservices with Spring Boot, Spring Cloud, Zipkin, Zuul, Eureka, Hystrix, Kubernetes, Elastic Stack and many more tools

Elasticsearch alerting made simple.

Graylog Extended Log Format (GELF) implementation in Java for all major logging frameworks: log4j, log4j2, java.util.logging, logback, JBossAS7 and WildFly 8-12

Journalbeat is a log shipper from systemd/journald to Logstash/Elasticsearch

Docker configuration for ELK monitoring stack with Curator and Beats data shippers support

A tool for batch loading data files (json, parquet, csv, tsv) into ElasticSearch

log analysis tool

Security event correlation engine for ELK stack

提供各种客户端接入阿里云 消息队列 Kafka 的demo工程

📊 Ansible playbook for setting up an ELK/EFK stack and clients.