Search code examples
elasticsearchlogstashlogstash-grokelksonicwall

Filter Logstash Sonicwall

I'm using ELK and I wanted to know where I can insert filters to analyze Sonicwall logs and view them in the grafana.

Would you put it in the filter.conf of the logstash?

Can anybody help me?

Solution

  • Elastic might add a module for Sonicwall in future filebeat release. Checkout this. It is part of x-pack license but you can try it out in the trial version.

    Alternatively, you can use a combination of filebeat & logstash to scrape and parse the logs and ingest it in Elastic Search. Grafana can connect to Elasticsearch directly so you can use it to create visualisations and dashboards.