Introduction

The ELK stack is a combination of the products Elasticsearch, Logstash and Kibana. They form a powerful solution for indexing and visualizing big data. The Cyber Intelligence Framework uses the ELK stack to visualize its data.

Content

This repository contains documentation about combining the ELK stack with honeypots. The documentation is a result of researches done by students. The directories contain configuration files for Logstash and for the honeypots that were used during the researches. They represent connectors between honeypots and the ELK stack to pass data through for visualization.