This repository contains different configurations for logstash 6.5.4, elasticsearch 6.5.4 and kibana 6.5.4.

Devices / Products included:

• Firewall Palo Alto traffic and URL.
• Firewall Juniper NetScreen.
• Firewall Juniper SRX.
• Bluecoat SG traffic.
• Bluecoat SG SysLog.
• Arbor Pravail DDoS.
• Proxy Squid.
• Nginx WebServer.

Configuration files directory: /etc/logstash/conf.d/

Templates:

Just paste entire text files into your development console in Kibana.

Or execute this on your elasticsearch server:

curl -XPUT localhost:9200/_template/name -d ' { content } '

Visualizations (import json on kibana -> Management -> Saved objects)

Dashboards (import json on kibana -> Management -> Saved objects)

Searches (import json on kibana -> Management -> Saved objects)