Skip to content

A collection of pre-configured containers for Sentinel log ingest using logstash

Notifications You must be signed in to change notification settings

N4SOC/SentinelLogstash

Folders and files

NameName
Last commit message
Last commit date

Latest commit

 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 

Repository files navigation

Azure Sentinel log collectors

Copy example.env to .env and replace variables for required modules cp example.env .env

To install docker & docker compose:

sudo bash docker_install.sh

To build a single profile:

docker-compse --profile ids build

To build multiple profiles:

docker-compse --profile ids --profile sophos build

To run (Foreground):

docker-compse --profile ids up

To run (Background):

docker-compse --profile ids up -d

To enable auto-update

Edit docker_refresh.sh to refelect correct path and profiles in use cp docker_refresh.sh /etc/cron.daily/

To enable remote management access

Add ngrok auth key into .env docker-compse --profile mgmt up -d

About

A collection of pre-configured containers for Sentinel log ingest using logstash

Resources

Stars

Watchers

Forks

Releases

No releases published

Packages

No packages published