March 9, 2014

Logstash 101 - April 20th, 2014

Join us on April 20th at 1pm to hear Embalmed speak about running Logstash, an open source alternative to Splunk. He'll be covering:

  • How to setup Logstash
  • Options for delivering logs to Logstash (redis, lumberjack, syslog)
  • Logstash grok filters / parsing
  • A few minutes on SEC for realtime alerting
  • Kibana3 frontend
  • Securing ElasticSearch
  • Caveats/issues

Embalmed is Senior Network Security Engineer in the Seattle area.


Slides and Sample configs for the presentation can be found here: