Project

General

Profile

Actions
Copy link

Feature #10421

closed
MP

suricata unix_stream support for telegraf

Feature #10421: suricata unix_stream support for telegraf

Added by Manuel Piovan over 6 years ago. Updated about 6 years ago.

Status:
Resolved
Priority:
Very Low
Assignee:
-
Category:
Suricata
Target version:
-
Start date:
04/03/2020
Due date:
% Done:

0%

Estimated time:
Plus Target Version:

Description

it would be nice if there was support for telegraf under suricata
input.suricata need unix socket to be created for listening

suricata need
- eve-log:
enabled: yes
filetype: unix_stream
filename: suricata-stats.sock
types:
- stats:
threads: yes

i've made a test and it work if i manually edit the suricata.yaml
more info https://github.com/influxdata/telegraf/tree/master/plugins/inputs/suricata

Files

Immagine.jpg (80.8 KB) Immagine.jpg grafana+suricata example Manuel Piovan, 04/03/2020 10:29 AM

BM Updated by Bill Meeks about 6 years ago Actions
Copy link
 #1

Support for the requested feature has been added to the latest version of the Suricata GUI package, version 5.0.3. The pull request has been merged. Details are available here: https://github.com/pfsense/FreeBSD-ports/pull/901.

This request can be marked as RESOLVED.

JP Updated by Jim Pingle about 6 years ago Actions
Copy link
 #2

  • Status changed from New to Resolved
Actions
Copy link

Also available in: Atom