{"id":54536,"date":"2019-12-28T00:00:00","date_gmt":"2019-12-27T21:00:00","guid":{"rendered":"https:\/\/prohoster.info\/blog\/blog_prohoster\/3-elastic-stack-analiz-security-logov-dashbordy"},"modified":"2020-02-18T14:02:33","modified_gmt":"2020-02-18T11:02:33","slug":"3-elastic-stack-analiz-security-logov-dashbordy","status":"publish","type":"post","link":"https:\/\/prohoster.info\/az\/blog\/administrirovanie\/3-elastic-stack-analiz-security-logov-dashbordy","title":{"rendered":"3. Elastic stack: t\u0259hl\u00fck\u0259sizlik loglar\u0131n\u0131n analizi. Dashboardlar","gt_translate_keys":[{"key":"rendered","format":"text"}]},"content":{"rendered":"

\"3.
\n
\n\u00d6t\u0259n m\u0259qal\u0259l\u0259rd\u0259 ELK stack il\u0259 tan\u0131\u015f olduq v\u0259 Logstash konfiqurasiya fayl\u0131n\u0131n log parserini nec\u0259 quraca\u011f\u0131m\u0131z\u0131 m\u00fczakir\u0259 etdik, bu m\u0259qal\u0259d\u0259 is\u0259 analitika bax\u0131m\u0131ndan \u0259n vacib olan, sistemd\u0259n n\u0259l\u0259ri g\u00f6rm\u0259k ist\u0259diyinizi v\u0259 bunun \u00fc\u00e7\u00fcn n\u0259l\u0259rin yarad\u0131ld\u0131\u011f\u0131n\u0131 - qrafikl\u0259r v\u0259 c\u0259dv\u0259ll\u0259r birl\u0259\u015fdirilmi\u015fdir dashboardlar<\/b>. Bu g\u00fcn vizualla\u015fd\u0131rma sistemi il\u0259 yax\u0131ndan tan\u0131\u015f olaca\u011f\u0131q Kibana<\/b>, qrafikl\u0259r v\u0259 c\u0259dv\u0259ll\u0259r yaratma\u011f\u0131 \u00f6yr\u0259n\u0259c\u0259k v\u0259 n\u0259tic\u0259d\u0259 Check Point firewall loglar\u0131 \u0259sas\u0131nda sad\u0259 bir dashboard quraca\u011f\u0131q.
\n<\/a><\/noindex>
\nKibana il\u0259 i\u015fl\u0259m\u0259kd\u0259ki ilk add\u0131m index pattern<\/b>, m\u0259ntiqi olaraq, m\u00fc\u0259yy\u0259n prinsipl\u0259r\u0259 g\u00f6r\u0259 birl\u0259\u015fdirilmi\u015f indeksl\u0259rin bazas\u0131d\u0131r. T\u0259bii ki, bu, Kibanan\u0131n b\u00fct\u00fcn indeksl\u0259rd\u0259 m\u0259lumatlar\u0131 daha rahat axtarmas\u0131 \u00fc\u00e7\u00fcn t\u0259nziml\u0259m\u0259dir. Bu, m\u0259s\u0259l\u0259n, \u201ccheckpoint-*\u201d \u015ftamp\u0131 il\u0259 indeks ad\u0131n\u0131 uy\u011funla\u015fd\u0131raraq t\u0259yin edilir. M\u0259s\u0259l\u0259n, \u00abcheckpoint-2019.12.05\u00bb \u015ftamp\u0131na uy\u011fun g\u0259lir, ancaq sad\u0259c\u0259 \u00abcheckpoint\u00bb uy\u011fun g\u0259lmir. Eyni zamanda, axtar\u0131\u015fda m\u00fcxt\u0259lif indeks \u015ftamp\u0131 \u00fczr\u0259 bir m\u0259lumat\u0131 eyni anda axtarmaq m\u00fcmk\u00fcn deyil, bir az sonra g\u0259l\u0259c\u0259k m\u0259qal\u0259l\u0259rd\u0259 API sor\u011fular\u0131n\u0131n ya indeks adlar\u0131, ya da bir \u015ftamp \u00fczr\u0259 apar\u0131ld\u0131\u011f\u0131n\u0131 g\u00f6r\u0259c\u0259yik, \u015f\u0259kil interaktivdir:<\/p>\n

\"3.<\/a><\/noindex><\/p>\n

Daha sonra Discover menyusunda b\u00fct\u00fcn loglar\u0131n indeksl\u0259ndiyini v\u0259 d\u00fczg\u00fcn parserin quruldu\u011funu yoxlay\u0131r\u0131q. H\u0259r hans\u0131 bir uy\u011funsuzluq a\u015fkar olunsa, m\u0259s\u0259l\u0259n, m\u0259lumat n\u00f6v\u00fcn\u00fcn s\u0259tird\u0259n tam \u0259d\u0259d\u0259 d\u0259yi\u015fdirilm\u0259si laz\u0131m olsa, Logstash konfiqurasiya fayl\u0131n\u0131 redakt\u0259 etm\u0259k laz\u0131md\u0131r, n\u0259tic\u0259d\u0259 yeni loglar d\u00fczg\u00fcn yaz\u0131lacaq. K\u00f6hn\u0259 loglar\u0131n d\u0259yi\u015fikd\u0259n \u00f6nc\u0259 laz\u0131m olan g\u00f6r\u00fcn\u00fc\u015f\u00fc q\u0259bul etm\u0259si yaln\u0131z reindexasiya prosesi il\u0259 m\u00fcmk\u00fcnd\u00fcr, g\u0259l\u0259c\u0259k m\u0259qal\u0259l\u0259rd\u0259 bu \u0259m\u0259liyyat daha \u0259trafl\u0131 m\u00fczakir\u0259 olunacaq. H\u0259r \u015feyin qaydas\u0131nda oldu\u011funa \u0259min olaq, \u015f\u0259kil interaktivdir:<\/p>\n

\"3.<\/a><\/noindex><\/p>\n

Loglar yerind\u0259dir, dem\u0259k, dashboardlar\u0131n qurulmas\u0131na ba\u015flaya bil\u0259rik. T\u0259hl\u00fck\u0259sizlik m\u0259hsullar\u0131ndan dashboard analitikas\u0131 \u0259sas\u0131nda t\u0259\u015fkilatdak\u0131 \u0130T t\u0259hl\u00fck\u0259sizliyinin v\u0259ziyy\u0259tini ba\u015fa d\u00fc\u015fm\u0259k, cari siyas\u0259td\u0259ki z\u0259if yerlar\u0131 a\u00e7\u0131qca g\u00f6rm\u0259k v\u0259 onlar\u0131n aradan qald\u0131r\u0131lmas\u0131 \u00fc\u00e7\u00fcn yollar inki\u015faf etdirm\u0259k m\u00fcmk\u00fcnd\u00fcr. Bir ne\u00e7\u0259 vizualla\u015fd\u0131rma vasit\u0259sind\u0259n istifad\u0259 ed\u0259r\u0259k ki\u00e7ik bir dashboard quraca\u011f\u0131q. Dashboard 5 komponentd\u0259n ibar\u0259t olacaq: <\/p>\n

    \n
  1. bleydl\u0259r \u00fczr\u0259 loglar\u0131n \u00fcmumi say\u0131n\u0131 hesablama c\u0259dv\u0259li<\/li>\n
  2. kritik IPS siqnaturalar\u0131 \u00fczr\u0259 c\u0259dv\u0259l<\/li>\n
  3. Threat Prevention hadis\u0259l\u0259ri \u00fczr\u0259 dair\u0259vi diaqram<\/li>\n
  4. \u0259n populyar ziyar\u0259t edil\u0259n saytlar \u00fczr\u0259 diaqram<\/li>\n
  5. \u0259n t\u0259hl\u00fck\u0259li t\u0259tbiql\u0259rin istifad\u0259si \u00fczr\u0259 diaqram<\/li>\n<\/ol>\n

    \nVizualla\u015fd\u0131rma fiqurlar\u0131n\u0131 yaratmaq \u00fc\u00e7\u00fcn Visualize<\/b>, v\u0259 qurmaq ist\u0259diyimiz laz\u0131m olan fiquru se\u00e7m\u0259k laz\u0131md\u0131r! T\u0259dric\u0259n ir\u0259lil\u0259y\u0259k.<\/p>\n

    Bleydl\u0259r \u00fczr\u0259 loglar\u0131n \u00fcmumi say\u0131n\u0131 hesablamaq \u00fc\u00e7\u00fcn c\u0259dv\u0259l<\/h3>\n

    \nBunun \u00fc\u00e7\u00fcn fiquru se\u00e7\u0259c\u0259yik Data Table<\/b>, qrafikl\u0259r yaratmaq \u00fc\u00e7\u00fcn avadanl\u0131qlara daxil oluruq, solda forma parametrl\u0259ri verilir, sa\u011fda is\u0259 cari parametrl\u0259r \u00fczr\u0259 nec\u0259 g\u00f6r\u00fcn\u0259c\u0259yi g\u00f6st\u0259rilir. \u018fvv\u0259lc\u0259 tamamlanm\u0131\u015f c\u0259dv\u0259lin nec\u0259 g\u00f6r\u00fcnd\u00fcy\u00fcn\u00fc g\u00f6st\u0259r\u0259c\u0259y\u0259m, daha sonra parametrl\u0259rl\u0259 ke\u00e7\u0259c\u0259yik, \u015f\u0259kil klik edil\u0259ndir:<\/p>\n

    \"3.<\/a><\/noindex><\/p>\n

    Forman\u0131n daha \u0259trafl\u0131 parametrl\u0259ri, \u015f\u0259kil klik edil\u0259ndir:<\/p>\n

    \"3.<\/a><\/noindex><\/p>\n

    Parametrl\u0259ri m\u00fczakir\u0259 ed\u0259k.<\/p>\n

    \u0130lk n\u00f6vb\u0259d\u0259 t\u0259nziml\u0259nir metrika<\/b>, bu, b\u00fct\u00fcn sah\u0259l\u0259rin toplanaca\u011f\u0131 d\u0259y\u0259rdir. Metrikalar, s\u0259n\u0259dl\u0259rd\u0259n m\u00fc\u0259yy\u0259n bir \u00fcsulla al\u0131nan d\u0259y\u0259rl\u0259r \u0259sas\u0131nda hesablan\u0131r. D\u0259y\u0259rl\u0259r ad\u0259t\u0259n sah\u0259l\u0259rd\u0259n<\/b> s\u0259n\u0259d, lakin h\u0259m\u00e7inin skriptl\u0259r istifad\u0259 ed\u0259r\u0259k d\u0259 yarad\u0131lm\u0131\u015f ola bil\u0259r. Bu halda Kolleksiyala\u015fd\u0131rma: Say<\/b> (loklar\u0131n \u00fcmumi say\u0131).<\/p>\n

    Bundan sonra c\u0259dv\u0259li b\u00f6lm\u0259l\u0259r\u0259 (sah\u0259l\u0259r\u0259) ay\u0131r\u0131r\u0131q, hans\u0131lar \u00fczr\u0259 metrika hesablanacaq. Bu funksiyan\u0131 Buckets konfiqurasiyas\u0131 yerin\u0259 yetirir ki, bu da 2 variantdan ibar\u0259tdir: <\/p>\n

      \n
    1. split rows \u2014 s\u00fctunlar\u0131n \u0259lav\u0259 edilm\u0259si v\u0259 sonradan c\u0259dv\u0259lin s\u0259tirl\u0259r\u0259 b\u00f6l\u00fcnm\u0259si<\/li>\n
    2. split table \u2014 m\u00fc\u0259yy\u0259n bir sah\u0259nin d\u0259y\u0259rl\u0259rin\u0259 g\u00f6r\u0259 bir ne\u00e7\u0259 c\u0259dv\u0259l\u0259 b\u00f6l\u00fcnm\u0259si. <\/li>\n<\/ol>\n

      \n\u0130 buckets<\/b> bir ne\u00e7\u0259 b\u00f6lm\u0259 \u0259lav\u0259 etm\u0259k m\u00fcmk\u00fcnd\u00fcr ki, bir ne\u00e7\u0259 s\u00fctun v\u0259 ya c\u0259dv\u0259l yarada bil\u0259siniz, burada m\u0259hdudiyy\u0259tl\u0259r daha \u00e7ox m\u0259ntiqidir. Kolleksiyala\u015fd\u0131rmada segmentl\u0259rin b\u00f6l\u00fcnm\u0259si \u00fc\u00e7\u00fcn hans\u0131 \u00fcsul se\u00e7il\u0259c\u0259yini se\u00e7m\u0259k olar: ipv4 aral\u0131\u011f\u0131, tarix aral\u0131\u011f\u0131, \u015e\u0259rtl\u0259r v\u0259 s. \u018fn maraql\u0131 se\u00e7iml\u0259rd\u0259n biri Terms<\/b> v\u0259 Zarur\u0259t \u015e\u0259rtl\u0259ri<\/b>, b\u00f6l\u00fcnm\u0259 m\u00fc\u0259yy\u0259n bir indeksin sah\u0259sinin d\u0259y\u0259rl\u0259ri \u00fczr\u0259 ba\u015f verir, onlar\u0131n d\u00f6n\u0259ri olan d\u0259y\u0259r say\u0131 v\u0259 bax\u0131\u015f\u0131 aras\u0131nda f\u0259rq vard\u0131r. Biz bleydl\u0259rin adlar\u0131na g\u00f6r\u0259 c\u0259dv\u0259li b\u00f6lm\u0259k ist\u0259diyimiz \u00fc\u00e7\u00fcn sah\u0259ni se\u00e7irik \u2014 product.keyword<\/b> v\u0259 25 d\u00f6n\u0259r d\u0259y\u0259ri \u00f6l\u00e7\u00fcs\u00fcn\u00fc t\u0259yin edirik. <\/p>\n

      Elasticsearch-d\u0259 s\u0259tir \u0259v\u0259zin\u0259 2 n\u00f6v m\u0259lumat istifad\u0259 edilir \u2014 text<\/b> v\u0259 keyword<\/b>. \u018fg\u0259r tam m\u0259tn axtar\u0131\u015f\u0131 yerin\u0259 yetirm\u0259k ist\u0259yirsinizs\u0259, text tipind\u0259n istifad\u0259 etm\u0259lisiniz, bu sizin axtar\u0131\u015f xidm\u0259tinizi yazark\u0259n \u00e7ox rahatd\u0131r, m\u0259s\u0259l\u0259n, m\u00fc\u0259yy\u0259n sah\u0259d\u0259 (m\u0259tn) s\u00f6z\u00fcn xat\u0131rlanmas\u0131n\u0131 axtar\u0131rs\u0131n\u0131z. \u018fg\u0259r yaln\u0131z d\u0259qiq uy\u011funluq ist\u0259s\u0259niz, keyword tipind\u0259n istifad\u0259 etm\u0259lisiniz. H\u0259m\u00e7inin, keyword m\u0259lumat tipl\u0259rini s\u0131ralama v\u0259 ya kolleksiyala\u015fd\u0131rma t\u0259l\u0259b ed\u0259n sah\u0259l\u0259r \u00fc\u00e7\u00fcn istifad\u0259 edilm\u0259lidir, y\u0259ni bizim v\u0259ziyy\u0259timizd\u0259.<\/p>\n

      N\u0259tic\u0259d\u0259 Elasticsearch, m\u0259hsul sah\u0259sind\u0259ki d\u0259y\u0259r\u0259 g\u00f6r\u0259 toplanm\u0131\u015f loklar\u0131n say\u0131n\u0131 m\u00fc\u0259yy\u0259n bir zamanla hesablama\u011f\u0131 t\u0259min edir. Custom Label-d\u0259 c\u0259dv\u0259ld\u0259 g\u00f6r\u00fcn\u0259c\u0259k s\u00fctunun ad\u0131n\u0131 t\u0259yin edirik, loklar\u0131n topland\u0131\u011f\u0131 zaman\u0131 t\u0259yin edirik, g\u00f6r\u00fcnt\u00fcl\u0259m\u0259 i\u015fini ba\u015flay\u0131r\u0131q \u2014 Kibana sor\u011fu g\u00f6nd\u0259rir, cavab\u0131 g\u00f6zl\u0259yir v\u0259 sonra al\u0131nan m\u0259lumatlar\u0131 vizualla\u015fd\u0131r\u0131r. C\u0259dv\u0259l haz\u0131rd\u0131r!<\/p>\n

      T\u0259hl\u00fck\u0259 \u0130dar\u0259si hadis\u0259l\u0259ri \u00fczr\u0259 dair\u0259vi diaqram<\/h3>\n

      \nMaraql\u0131 m\u0259lumatd\u0131r ki, reaksiya faiz nisb\u0259tl\u0259ri nec\u0259dir detect<\/b> v\u0259 prevent<\/b> m\u0259lumat t\u0259hl\u00fck\u0259sizliyi il\u0259 ba\u011fl\u0131 hadis\u0259l\u0259r \u00fc\u00e7\u00fcn m\u00f6vcud t\u0259hl\u00fck\u0259sizlik siyas\u0259tind\u0259. Bu hal \u00fc\u00e7\u00fcn dair\u0259vi qrafik yax\u015f\u0131 uy\u011fundur. Visualize-dan se\u00e7irik \u2014 Dair\u0259vi qrafik<\/b>. H\u0259m\u00e7inin, metrikada loglar\u0131n say\u0131 \u00fczr\u0259 agregasiyan\u0131 t\u0259yin edirik. Buckets-da Terms => action qoyuruq. <\/p>\n

      H\u0259r \u015fey d\u00fczg\u00fcn g\u00f6r\u00fcn\u00fcr, lakin n\u0259tic\u0259d\u0259 b\u00fct\u00fcn blaydlara dair d\u0259y\u0259rl\u0259r g\u00f6st\u0259rilir, yaln\u0131z Threat Prevention \u00e7\u0259r\u00e7iv\u0259sind\u0259 i\u015fl\u0259y\u0259n blaydlara g\u00f6r\u0259 filtr etm\u0259k laz\u0131md\u0131r. Ona g\u00f6r\u0259 d\u0259 m\u00fctl\u0259q filtr<\/b> konfiqurasiya edirik ki, yaln\u0131z \u0130B hadis\u0259l\u0259rin\u0259 cavabdeh olan blaydlara dair m\u0259lumat axtaraq \u2014 product: (\u00abAnti-Bot\u00bb OR \u00abNew Anti-Virus\u00bb OR \u00abDDoS Protector\u00bb OR \u00abSmartDefense\u00bb OR \u00abThreat Emulation\u00bb). \u015e\u0259kil klikl\u0259n\u0259 bil\u0259n:<\/p>\n

      \"3.<\/a><\/noindex><\/p>\n

      V\u0259 daha \u0259trafl\u0131 parametrl\u0259r, \u015f\u0259kil klikl\u0259n\u0259 bil\u0259n:<\/p>\n

      \"3.<\/a><\/noindex><\/p>\n

      IPS hadis\u0259l\u0259ri \u00fczr\u0259 c\u0259dv\u0259l<\/h3>\n

      \nSonra \u0130B il\u0259 ba\u011fl\u0131 hadis\u0259l\u0259rin blayd \u00fczr\u0259 g\u00f6r\u00fcnt\u00fcl\u0259nm\u0259si v\u0259 yoxlan\u0131lmas\u0131 \u00e7ox \u00f6n\u0259mlidir IPS<\/b> v\u0259 Threat Emulation<\/b>, hans\u0131 ki m\u00f6vcud siyas\u0259tl\u0259 bloklanm\u0131r, sonradan ya imzan\u0131 prevent rejimin\u0259 ke\u00e7irm\u0259k, ya da trafik etibarl\u0131d\u0131rsa \u2014 imzan\u0131 yoxlamamaq \u00fc\u00e7\u00fcn. C\u0259dv\u0259li d\u0259 ilk n\u00fcmun\u0259d\u0259ki kimi yarad\u0131r\u0131q, yaln\u0131z f\u0259rqlilik ondan ibar\u0259tdir ki, bir ne\u00e7\u0259 s\u00fctun yarad\u0131r\u0131q: protections.keyword, severity.keyword, product.keyword, originsicname.keyword. M\u00fctl\u0259q filtr konfiqurasiya edirik ki, yaln\u0131z \u0130B hadis\u0259l\u0259rin\u0259 cavabdeh olan blaydlara dair m\u0259lumat axtaraq \u2014 product: ( \u00abSmartDefense\u00bb OR \u00abThreat Emulation\u00bb). \u015e\u0259kil klikl\u0259n\u0259 bil\u0259n:<\/b> Daha \u0259trafl\u0131 parametrl\u0259r, \u015f\u0259kil klikl\u0259n\u0259 bil\u0259n:<\/p>\n

      \"3.<\/a><\/noindex><\/p>\n

      \u018fn \u00e7ox ziyar\u0259t olunan saytlarla ba\u011fl\u0131 qrafikl\u0259r<\/p>\n

      \"3.<\/a><\/noindex><\/p>\n

      Bunun \u00fc\u00e7\u00fcn forma yarad\u0131r\u0131q \u2014<\/h3>\n

      \n. Metrikada da count (Y oxu) istifad\u0259 edirik, X oxunda ziyar\u0259t olunan saytlar\u0131n ad\u0131n\u0131 istifad\u0259 ed\u0259c\u0259yik \u2014 \u201cappi_name\u201d. Burada ki\u00e7ik bir hiyl\u0259 var, \u0259g\u0259r m\u0259qs\u0259dl\u0259ri haz\u0131rk\u0131 variantda ba\u015fladarsan\u0131z, b\u00fct\u00fcn saytlar qrafikd\u0259 eyni r\u0259ngd\u0259 qeyd olunacaq, onlar\u0131 m\u00fcxt\u0259lif r\u0259ngli etm\u0259k \u00fc\u00e7\u00fcn \u0259lav\u0259 t\u0259nziml\u0259m\u0259 istifad\u0259 edirik \u2014 \u201csplit series\u201d, bu is\u0259 art\u0131q haz\u0131r kolonu se\u00e7il\u0259n sah\u0259y\u0259 g\u00f6r\u0259 bir ne\u00e7\u0259 d\u0259y\u0259r\u0259 b\u00f6lm\u0259y\u0259 imkan verir! Bu b\u00f6lm\u0259ni ya bir r\u0259ngli kolon olaraq stacked rejimind\u0259, ya da normal rejimd\u0259 X oxunun m\u00fc\u0259yy\u0259n d\u0259y\u0259rin\u0259 g\u00f6r\u0259 bir ne\u00e7\u0259 kolon yaratmaq \u00fc\u00e7\u00fcn istifad\u0259 ed\u0259 bil\u0259rik. Bu halda buradak\u0131 d\u0259y\u0259ri X oxu \u00fczr\u0259 istifad\u0259 edirik, bu b\u00fct\u00fcn kolonlar\u0131n r\u0259ngar\u0259ng olmas\u0131na imkan verir, sa\u011f \u00fcst t\u0259r\u0259fd\u0259n bunlar r\u0259ngl\u0259rl\u0259 g\u00f6st\u0259ril\u0259c\u0259k. Filtrd\u0259 \u2014 product: \u00abURL Filtering\u00bb olaraq t\u0259yin edirik ki, yaln\u0131z ziyar\u0259t edil\u0259n saytlar \u00fczr\u0259 m\u0259lumat\u0131 g\u00f6r\u0259 bil\u0259k, \u015f\u0259kil klikl\u0259n\u0259 bil\u0259n: Vertical Bar<\/b>Parametrl\u0259r:<\/p>\n

      \"3.<\/a><\/noindex><\/p>\n

      \u018fn t\u0259hl\u00fck\u0259li t\u0259tbiql\u0259rin istifad\u0259si \u00fczr\u0259 qrafik<\/p>\n

      \"3.<\/a><\/noindex><\/p>\n

      T\u0259hl\u00fck\u0259li t\u0259tbiql\u0259rin istifad\u0259si \u00fczr\u0259 qrafik<\/h3>\n

      \nBunun i\u00e7in Vertical Bar fig\u00fcr\u00fcn\u00fc olu\u015fturuyoruz. Y ekseninde count metri\u011fini kullan\u0131yoruz, X ekseninde ise kullan\u0131lan uygulamalar\u0131n adlar\u0131n\u0131 - \u201cappi_name\u201d de\u011ferleri olarak alaca\u011f\u0131z. Filtrenin ayarlanmas\u0131 en \u00f6nemlisi - product: \"Application Control\" AND app_risk: (4 OR 5 OR 3) AND action: \"accept\". Uygulama kontrol\u00fc blay\u0131 i\u00e7in loglar\u0131 filtreliyoruz, yaln\u0131zca kritik, y\u00fcksek ve orta riskli olarak kategorize edilen web sitelerini al\u0131yoruz ve bu sitelere eri\u015fim izin verilmi\u015fse sadece o durumda filtreleme yap\u0131yoruz. G\u00f6rsel t\u0131klanabilir:<\/p>\n

      \"3.<\/a><\/noindex><\/p>\n

      Ayarlar, t\u0131klanabilir:<\/p>\n

      \"3.<\/a><\/noindex><\/p>\n

      G\u00f6sterge Paneli<\/h3>\n

      \nG\u00f6sterge panellerini g\u00f6r\u00fcnt\u00fcleme ve olu\u015fturma ayr\u0131 bir men\u00fc maddesinde - Dashboard<\/b>. Burada her \u015fey basit, yeni bir g\u00f6sterge paneli olu\u015fturuluyor, g\u00f6rselle\u015ftirme ekleniyor, yerle\u015ftiriliyor ve hepsi bu kadar!<\/p>\n

      Bir g\u00f6sterge paneli olu\u015fturuyoruz ki bu, kurulu\u015fun IB durumunun temelini anlamam\u0131za yard\u0131mc\u0131 olacak, fakat yaln\u0131zca Check Point seviyesinde, g\u00f6rsel t\u0131klanabilir:<\/p>\n

      \"3.<\/a><\/noindex><\/p>\n

      Bu grafiklere dayanarak, hangi kritik imzalar\u0131n g\u00fcvenlik duvar\u0131nda engellenmedi\u011fini, kullan\u0131c\u0131lar\u0131n nerelere gitti\u011fini ve en tehlikeli uygulamalar\u0131n hangileri oldu\u011funu anlayabiliyoruz.<\/p>\n

      N\u0259tic\u0259<\/h3>\n

      \nKibana'daki temel g\u00f6rselle\u015ftirme olanaklar\u0131n\u0131 inceledik ve bir g\u00f6sterge paneli olu\u015fturduk, fakat bu yaln\u0131zca k\u00fc\u00e7\u00fck bir k\u0131s\u0131m. Kursun ilerleyen b\u00f6l\u00fcmlerinde harita ayarlar\u0131n\u0131, elasticsearch sistemi ile \u00e7al\u0131\u015fmay\u0131, API isteklerini, otomasyonu ve daha bir\u00e7ok \u015feyi ayr\u0131 olarak inceleyece\u011fiz!<\/p>\n

      Ona g\u00f6r\u0259 d\u0259 yenilikl\u0259ri izl\u0259yin (Telegram<\/a><\/noindex>, Facebook<\/a><\/noindex>, VK<\/a><\/noindex>, TS Solution Blog<\/a><\/noindex>), Yandex.Dzen<\/a><\/noindex>.
      \n
      M\u0259nb\u0259:       habr.com<\/a><\/p>","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"excerpt":{"rendered":"

      \u0412 \u043f\u0440\u043e\u0448\u043b\u044b\u0445 \u0441\u0442\u0430\u0442\u044c\u044f\u0445 \u043c\u044b \u043d\u0435\u043c\u043d\u043e\u0433\u043e \u043e\u0437\u043d\u0430\u043a\u043e\u043c\u0438\u043b\u0438\u0441\u044c \u0441\u043e \u0441\u0442\u0435\u043a\u043e\u043c elk \u0438 \u043d\u0430\u0441\u0442\u0440\u043e\u0439\u043a\u043e\u0439 \u043a\u043e\u043d\u0444\u0438\u0433\u0443\u0440\u0430\u0446\u0438\u043e\u043d\u043d\u043e\u0433\u043e \u0444\u0430\u0439\u043b\u0430 Logstash \u0434\u043b\u044f \u043f\u0430\u0440\u0441\u0435\u0440\u0430 \u043b\u043e\u0433\u043e\u0432, \u0432 \u0434\u0430\u043d\u043d\u043e\u0439 \u0441\u0442\u0430\u0442\u044c\u0435 \u043f\u0435\u0440\u0435\u0439\u0434\u0435\u043c \u043a \u0441\u0430\u043c\u043e\u043c\u0443 \u0432\u0430\u0436\u043d\u043e\u043c\u0443 \u0441 \u0442\u043e\u0447\u043a\u0438 \u0437\u0440\u0435\u043d\u0438\u044f \u0430\u043d\u0430\u043b\u0438\u0442\u0438\u043a\u0438, \u0442\u043e \u0447\u0442\u043e \u0432\u044b \u0445\u043e\u0442\u0438\u0442\u0435 \u0443\u0432\u0438\u0434\u0435\u0442\u044c \u043e\u0442 \u0441\u0438\u0441\u0442\u0435\u043c\u044b \u0438 \u0440\u0430\u0434\u0438 \u0447\u0435\u0433\u043e \u0432\u0441\u0435 \u0441\u043e\u0437\u0434\u0430\u0432\u0430\u043b\u043e\u0441\u044c \u2014 \u044d\u0442\u043e \u0433\u0440\u0430\u0444\u0438\u043a\u0438 \u0438 \u0442\u0430\u0431\u043b\u0438\u0446\u044b \u043e\u0431\u044a\u0435\u0434\u0438\u043d\u0435\u043d\u043d\u044b\u0435 \u0432 \u0434\u0430\u0448\u0431\u043e\u0440\u0434\u044b. \u0421\u0435\u0433\u043e\u0434\u043d\u044f \u043c\u044b \u043f\u043e\u0431\u043b\u0438\u0436\u0435 \u043e\u0437\u043d\u0430\u043a\u043e\u043c\u0438\u043c\u0441\u044f \u0441 \u0441\u0438\u0441\u0442\u0435\u043c\u043e\u0439 \u0432\u0438\u0437\u0443\u0430\u043b\u0438\u0437\u0430\u0446\u0438\u0438 […]<\/p>\n","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"author":1,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[688],"tags":[],"class_list":["post-54536","post","type-post","status-publish","format-standard","hentry","category-administrirovanie"],"aioseo_notices":[],"aioseo_head":"\n\t\t\n\t\n\t\n\t\n\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\n","aioseo_head_json":{"title":"\ud83e\udd473. Elastic stack: g\u00fcvenlik loglar\u0131n\u0131n analizi. G\u00f6sterge panelleri | ProHoster","description":"","canonical_url":"https:\/\/prohoster.info\/az\/blog\/administrirovanie\/3-elastic-stack-analiz-security-logov-dashbordy","robots":"max-image-preview:large","keywords":"","webmasterTools":{"miscellaneous":""},"schema":null,"og:locale":"az_AZ","og:site_name":"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b","og:type":"article","og:title":"\ud83e\udd473. Elastic stack: \u0430\u043d\u0430\u043b\u0438\u0437 security \u043b\u043e\u0433\u043e\u0432. \u0414\u0430\u0448\u0431\u043e\u0440\u0434\u044b | ProHoster","og:url":"https:\/\/prohoster.info\/az\/blog\/administrirovanie\/3-elastic-stack-analiz-security-logov-dashbordy","og:image":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:secure_url":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:width":350,"og:image:height":350,"article:published_time":"2019-12-27T21:00:00+00:00","article:modified_time":"2020-02-18T11:02:33+00:00","article:publisher":"https:\/\/www.facebook.com\/prohoster","article:author":"https:\/\/www.facebook.com\/prohoster"},"aioseo_meta_data":{"post_id":"54536","title":null,"description":null,"keywords":null,"keyphrases":null,"primary_term":null,"canonical_url":null,"og_title":null,"og_description":null,"og_object_type":"default","og_image_type":"default","og_image_url":null,"og_image_width":null,"og_image_height":null,"og_image_custom_url":null,"og_image_custom_fields":null,"og_video":null,"og_custom_url":null,"og_article_section":null,"og_article_tags":null,"twitter_use_og":false,"twitter_card":"default","twitter_image_type":"default","twitter_image_url":null,"twitter_image_custom_url":null,"twitter_image_custom_fields":null,"twitter_title":null,"twitter_description":null,"schema":{"blockGraphs":[],"customGraphs":[],"default":{"data":{"Article":[],"Course":[],"Dataset":[],"FAQPage":[],"Movie":[],"Person":[],"Product":[],"ProductReview":[],"Car":[],"Recipe":[],"Service":[],"SoftwareApplication":[],"WebPage":[]},"graphName":"","isEnabled":true},"graphs":[]},"schema_type":null,"schema_type_options":null,"pillar_content":false,"robots_default":true,"robots_noindex":false,"robots_noarchive":false,"robots_nosnippet":false,"robots_nofollow":false,"robots_noimageindex":false,"robots_noodp":false,"robots_notranslate":false,"robots_max_snippet":null,"robots_max_videopreview":null,"robots_max_imagepreview":"large","priority":null,"frequency":null,"local_seo":null,"seo_analyzer_scan_date":"2026-01-24 11:45:20","breadcrumb_settings":null,"limit_modified_date":false,"reviewed_by":null,"ai":null,"created":"2021-02-28 20:03:57","updated":"2026-01-24 11:45:20","focus_keyword":null,"additional_keywords":null,"truseo_locale":null},"gt_translate_keys":[{"key":"link","format":"url"}],"_links":{"self":[{"href":"https:\/\/prohoster.info\/az\/wp-json\/wp\/v2\/posts\/54536","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/prohoster.info\/az\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/prohoster.info\/az\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/prohoster.info\/az\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/prohoster.info\/az\/wp-json\/wp\/v2\/comments?post=54536"}],"version-history":[{"count":0,"href":"https:\/\/prohoster.info\/az\/wp-json\/wp\/v2\/posts\/54536\/revisions"}],"wp:attachment":[{"href":"https:\/\/prohoster.info\/az\/wp-json\/wp\/v2\/media?parent=54536"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/prohoster.info\/az\/wp-json\/wp\/v2\/categories?post=54536"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/prohoster.info\/az\/wp-json\/wp\/v2\/tags?post=54536"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}