I’m trying to send alerts from Snort IDS to Elasticsearch, therefore I'm using 3 technologies:
- Elasticsearch- https://pastebin.com/uCNMaZFJ
- Filebeat- https://pastebin.com/45rC3rW5
I am expecting to see snort's alert logs when I check "http://localhost:9200/ola-*/_search?pretty", however nothing is retrieved.
I’m struggling to fix this problem. I don't know what I'm doing wrong.
Thanks in advance!