Beyond the basics : Logging Forensics with ELK (Elasticsearch, Logstash, Kibana)

In a previous blog post we explored how to use the ELK stack to build a fast, flexible and efficient log forensics platform. In this post we'll move beyond the basics and address some issues that are specific to configuring ELK to be a better log forensics platform. In particular, we'll be addressing querying - specifically running regex … Continue reading Beyond the basics : Logging Forensics with ELK (Elasticsearch, Logstash, Kibana)

2014 in review

The WordPress.com stats helper monkeys prepared a 2014 annual report for this blog. Here's an excerpt: The Louvre Museum has 8.5 million visitors per year. This blog was viewed about 170,000 times in 2014. If it were an exhibit at the Louvre Museum, it would take about 7 days for that many people to see … Continue reading 2014 in review