cyhook / IVRE-DRUNK-Logstash-Parser Public

Notifications You must be signed in to change notification settings
Fork 0
Star 0

This is a logstash parser that will enable the processing of IVRE json logs and enable storage on Elasticsearch.

GPL-3.0 license

0 stars 0 forks Branches Tags Activity

Name		Name	Last commit message	Last commit date
Latest commit History 6 Commits
LICENSE		LICENSE
README.md		README.md
ivre-json.conf		ivre-json.conf

Repository files navigation

IVRE-DRUNK-Logstash-Parser

This IVRE parser caters for only Nmap scans that you would like to display on your ELK stack. Link to IVRE - https://ivre.rocks/

The logstash parser will enable the processing of IVRE json logs.

Update and upgrade linux distribution
Install Java 8
Install Logstash - https://www.elastic.co/products/logstash
Add the parser to your directory /etc/logsgtash/conf.d/ and run logstash