I’m trying to send alerts from Snort IDS to Elasticsearch, therefore I'm using 3 technologies:

I am expecting to see snort's alert logs when I check "http://localhost:9200/ola-*/_search?pretty", however nothing is retrieved.

I’m struggling to fix this problem. I don't know what I'm doing wrong.

Thanks in advance!

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service, privacy policy and cookie policy

Browse other questions tagged or ask your own question.