Suricata 2 + EVE(JSON)
Anyone running Suricata 2 with the EVE output? Just put it on a dev box today, and it looks really cool! Almost Bro-light like info, and Splunk parsed it with no setup.
A link with Logstash / Kibana dashboards:
https://redmine.openinfosecfoundation.org/projects/suricata/wiki/_Logstash_Kibana_and_Suricata_JSON_output
A link with Logstash / Kibana dashboards:
https://redmine.openinfosecfoundation.org/projects/suricata/wiki/_Logstash_Kibana_and_Suricata_JSON_output