Filter messages depending on content

[bahram]

Hi, Paolor

I collect all the firewall traffic with the Use of Packetbeat collector
Then I create a stream on the port based (ie I separate traffic on the protocols and ports)
Then I add the stream to the pipeline

Security Log Monitoring and DNS Request Analysis

Packetbeat SPAN port Cisco switch 2960

hi guys I transfer a SPAN port Cisco 2960 to a VM machine (windows 2016 ) and i see traffic interface in vm machine with wireshark on the OS windows 2016 . VM . has tow interfaces with IP 192.168.0.112,113 range I can’t send traffic into Graylog server (version 3.1)with Packetbeat collector sidecar . who faced with this such scenario or Probleam ? please guide me . ++++++++++++++++++++++++++++++++++++++++++++++++++++ My colleagues and I have solved the issue. Find a spare NIC on a…