{"id":92075,"date":"2020-08-22T19:42:03","date_gmt":"2020-08-22T17:42:03","guid":{"rendered":"https:\/\/prohoster.info\/blog\/administrirovanie\/elk-siem-open-distro-vizualizacziya-informaczionnyh-panelej-elk-i-siem-v-elk"},"modified":"2020-08-22T19:42:03","modified_gmt":"2020-08-22T17:42:03","slug":"elk-siem-open-distro-vizualizacziya-informaczionnyh-panelej-elk-i-siem-v-elk","status":"publish","type":"post","link":"https:\/\/prohoster.info\/da\/blog\/administrirovanie\/elk-siem-open-distro-vizualizacziya-informaczionnyh-panelej-elk-i-siem-v-elk","title":{"rendered":"ELK SIEM Open Distro: Visualisering af informationspaneler ELK og SIEM i ELK","gt_translate_keys":[{"key":"rendered","format":"text"}]},"content":{"rendered":"<p>I dette indl\u00e6g vil ops\u00e6tningen af visualisering af informationspaneler ELK og SIEM i ELK blive beskrevet<br \/>\nArtiklen er opdelt i f\u00f8lgende sektioner:<\/p>\n<p><\/p>\n<p>1- Oversigt over ELK SIEM<br \/>\n2- Standard dashboards<br \/>\n3- Oprettelse af dine f\u00f8rste dashboards<\/p>\n<p><noindex><a rel=\"nofollow\" name=\"habracut\"><\/a><\/noindex><\/p>\n<p>Indholdsfortegnelse for alle indl\u00e6g.<\/p>\n<p><\/p>\n<ul>\n<li><noindex><a rel=\"nofollow\" href=\"https:\/\/habr.com\/ru\/post\/515576\/\">Introduktion. Udrulning af infrastruktur og teknologier til SOC as Service (SOCasS)<\/a><\/noindex><\/li>\n<li><noindex><a rel=\"nofollow\" href=\"https:\/\/habr.com\/ru\/post\/515722\/\">ELK stack \u2014 installation og ops\u00e6tning<\/a><\/noindex><\/li>\n<li><noindex><a rel=\"nofollow\" href=\"https:\/\/habr.com\/ru\/post\/515920\/\">Gennemgang af open Distro<\/a><\/noindex><\/li>\n<li><noindex><a rel=\"nofollow\" href=\"https:\/\/habr.com\/ru\/post\/516050\/\">Visualisering af Dashboards og ELK SIEM<\/a><\/noindex><\/li>\n<li>Integration med WAZUH<\/li>\n<li>Alarm (Alerting)<\/li>\n<li>Rapportering<\/li>\n<li>Sagsstyring<\/li>\n<\/ul>\n<p><\/p>\n<h3 id=\"1-obzor-elk-siem\">1- Oversigt over ELK SIEM<\/h3>\n<p><\/p>\n<p>ELK SIEM blev for nylig tilf\u00f8jet til ELK-stakken i version 7.2 fra den 25. juni 2019.<\/p>\n<p><\/p>\n<p>Dette SIEM-l\u00f8sning, skabt af elastic.co, har til form\u00e5l at g\u00f8re livet nemmere og mindre besv\u00e6rligt for sikkerhedsanalyser.<\/p>\n<p><\/p>\n<p>I vores version af arbejdet har vi besluttet at skabe vores eget SIEM og v\u00e6lge vores egen kontrolpanel.<\/p>\n<p><\/p>\n<p>Men vi anser det som vigtigt at f\u00f8rst udforske ELK SIEM.<\/p>\n<p><\/p>\n<h4 id=\"11--razdel-host-events\">1.1- Sektion for v\u00e6rtsh\u00e6ndelser<\/h4>\n<p><\/p>\n<p>F\u00f8rst vil vi se p\u00e5 v\u00e6rtsektionen. V\u00e6rtsektionen giver dig mulighed for at se de h\u00e6ndelser, der genereres p\u00e5 selve endepunktet.<\/p>\n<p><\/p>\n<p><img decoding=\"async\" alt=\"ELK SIEM Open Distro: Visualisering af informationspaneler ELK og SIEM i ELK\" src=\"\/wp-content\/uploads\/2020\/08\/54ebe976e6479930ca8d20cfacdc0d8d.png\" style=\"display:block;margin: 0 auto;\" \/><\/p>\n<p><\/p>\n<p><img decoding=\"async\" alt=\"ELK SIEM Open Distro: Visualisering af informationspaneler ELK og SIEM i ELK\" src=\"\/wp-content\/uploads\/2020\/08\/e0862fafaa4ad1ba34714339a33c698f.png\" style=\"display:block;margin: 0 auto;\" \/><\/p>\n<p><\/p>\n<p>N\u00e5r du klikker p\u00e5 visning af v\u00e6rter, b\u00f8r du f\u00e5 noget som dette. Som du kan se, er der tre v\u00e6rter tilsluttet denne computer:<\/p>\n<p><\/p>\n<p>1 Windows 10.<\/p>\n<p><\/p>\n<p>2 Ubuntu Server 18.04.<\/p>\n<p><\/p>\n<p>Vi har flere viste visualiseringer, hver viser forskellige typer h\u00e6ndelser.<\/p>\n<p><\/p>\n<p>For eksempel viser den, der er i midten, login-data for alle tre maskiner.<\/p>\n<p><\/p>\n<p>Den m\u00e6ngde data, som du ser her, blev indsamlet over fem dage. Dette forklarer det store antal mislykkede og succesfulde loginfors\u00f8g. Du vil sandsynligvis have et lille antal logs, s\u00e5 v\u00e6r ikke bekymret.<\/p>\n<p><\/p>\n<h4 id=\"12--razdel-setevyh-sobytiy\">1.2- Sektion for netv\u00e6rksh\u00e6ndelser<\/h4>\n<p><\/p>\n<p>N\u00e5r du g\u00e5r videre til netv\u00e6rkssektionen, b\u00f8r du f\u00e5 noget som dette. Denne sektion giver dig mulighed for n\u00f8je at overv\u00e5ge alt, hvad der sker i dit netv\u00e6rk, fra HTTP \/ TLS-trafik til DNS-trafik og eksterne advarsler om h\u00e6ndelser.<\/p>\n<p><\/p>\n<p><img decoding=\"async\" alt=\"ELK SIEM Open Distro: Visualisering af informationspaneler ELK og SIEM i ELK\" src=\"\/wp-content\/uploads\/2020\/08\/3ebae3d5e85dd84556eb26901c2fd519.png\" style=\"display:block;margin: 0 auto;\" \/><\/p>\n<p><\/p>\n<p><img decoding=\"async\" alt=\"ELK SIEM Open Distro: Visualisering af informationspaneler ELK og SIEM i ELK\" src=\"\/wp-content\/uploads\/2020\/08\/344db7fac06acabaa011657debb52993.png\" style=\"display:block;margin: 0 auto;\" \/><\/p>\n<p><\/p>\n<h3 id=\"2--dashbordy-po-umolchaniyu\">2- Standard dashboards<\/h3>\n<p><\/p>\n<p>For at lette livet for brugerne har udviklerne af elastic.co skabt et standard instrumentbr\u00e6t, der officielt underst\u00f8ttes af ELK. Vores bits var ikke en undtagelse herfra. Her vil jeg tage Packetbeat standard dashboards som eksempel.<\/p>\n<p><\/p>\n<p>Hvis du har gennemf\u00f8rt trin to i artiklen korrekt, b\u00f8r du have et opsat dashboard, der venter p\u00e5 dig. Lad os komme i gang.<\/p>\n<p><\/p>\n<p>V\u00e6lg dashbordsymbolet i den venstre fane i Kibana. Det er det tredje, n\u00e5r man t\u00e6ller op fra toppen.<\/p>\n<p><\/p>\n<p>Indtast navnet p\u00e5 andelen i s\u00f8gefanen.<\/p>\n<p><\/p>\n<p>Hvis der er flere moduler i biten, vil der blive oprettet et kontrolpanel for hver af dem. Men kun den med den aktive modul vil vise ikke-tomme data.<\/p>\n<p><\/p>\n<p>V\u00e6lg den, der har navnet p\u00e5 dit modul.<\/p>\n<p><\/p>\n<p>Dette er hovedskabelonen. <strong>PacketBeat<\/strong>.<\/p>\n<p><\/p>\n<p><img decoding=\"async\" alt=\"ELK SIEM Open Distro: Visualisering af informationspaneler ELK og SIEM i ELK\" src=\"\/wp-content\/uploads\/2020\/08\/f895c527f746c6df4c7e4e43c4eee802.png\" style=\"display:block;margin: 0 auto;\" \/><\/p>\n<p><\/p>\n<p>Dette er kontrolpanelet for netv\u00e6rkstr\u00f8mme. Det vil informere os om indg\u00e5ende og udg\u00e5ende pakker, kilder og destinationer for IP-adresser samt give mange nyttige oplysninger til analytikeren i sikkerhedscentret.<\/p>\n<p><\/p>\n<p><img decoding=\"async\" alt=\"ELK SIEM Open Distro: Visualisering af informationspaneler ELK og SIEM i ELK\" src=\"\/wp-content\/uploads\/2020\/08\/1d319ebf0865ea4ad18c9f1a10d6182d.png\" style=\"display:block;margin: 0 auto;\" \/><\/p>\n<p><\/p>\n<p><img decoding=\"async\" alt=\"ELK SIEM Open Distro: Visualisering af informationspaneler ELK og SIEM i ELK\" src=\"\/wp-content\/uploads\/2020\/08\/fb4f7078d667bc3c402198c2c58c293d.png\" style=\"display:block;margin: 0 auto;\" \/><\/p>\n<p><\/p>\n<h3 id=\"3---sozdanie-vashih-pervyh-dashbordov\">3 \u2014 Oprettelse af dine f\u00f8rste dashboards.<\/h3>\n<p><\/p>\n<h4 id=\"31--osnovnye-ponyatiya\">3\u20131- Grundl\u00e6ggende begreber.<\/h4>\n<p><\/p>\n<p><strong>A- Typer af dashboards:<\/strong><\/p>\n<p><\/p>\n<p>Dette er forskellige typer visualiseringer, som du kan bruge til at visualisere dine data.<\/p>\n<p><\/p>\n<p>for eksempel har vi:<\/p>\n<p><\/p>\n<ul>\n<li>S\u00f8jlediagram<\/li>\n<li>Kort<\/li>\n<li>Markdown-widget<\/li>\n<li>Cirkeldiagram<\/li>\n<\/ul>\n<p><\/p>\n<p><img decoding=\"async\" alt=\"ELK SIEM Open Distro: Visualisering af informationspaneler ELK og SIEM i ELK\" src=\"\/wp-content\/uploads\/2020\/08\/63a8cbb26fe1caa4c224fffca02a58ad.png\" style=\"display:block;margin: 0 auto;\" \/><\/p>\n<p><\/p>\n<p><strong>B- KQL (Kibana foresp\u00f8rgselssprog):<\/strong><\/p>\n<p><\/p>\n<p>Dette er sproget, der bruges i Kibana til nemt at s\u00f8ge i data. Det giver dig mulighed for at kontrollere, om bestemte data findes, og mange andre nyttige funktioner. For at l\u00e6re mere kan du udforske oplysningerne via dette link.<\/p>\n<p><\/p>\n<p><noindex><a rel=\"nofollow\" href=\"https:\/\/www.elastic.co\/guide\/en\/kibana\/current\/kuery-query.html\">https:\/\/www.elastic.co\/guide\/en\/kibana\/current\/kuery-query.html<\/a><\/noindex><\/p>\n<p><\/p>\n<p>Dette er et eksempel p\u00e5 en foresp\u00f8rgsel for at finde en host med Windows 10 pro.<\/p>\n<p><\/p>\n<p><img decoding=\"async\" alt=\"ELK SIEM Open Distro: Visualisering af informationspaneler ELK og SIEM i ELK\" src=\"\/wp-content\/uploads\/2020\/08\/2785f9afe1dfe463ad6b56febcfa04b8.png\" style=\"display:block;margin: 0 auto;\" \/><\/p>\n<p><\/p>\n<p><strong>C- Filtre:<\/strong><\/p>\n<p><\/p>\n<p>Denne funktion vil lade dig filtrere bestemte parametre, s\u00e5som hostnavn, kode eller begivenheds-ID osv. Filtre vil i h\u00f8j grad forbedre efterforskningsfasen med hensyn til tid og kr\u00e6fter brugt p\u00e5 at finde beviser.<\/p>\n<p><\/p>\n<p><strong>D- Den f\u00f8rste visualisering:<\/strong><\/p>\n<p><\/p>\n<p>Lad os oprette en visualisering for MITER ATT &amp; CK.<\/p>\n<p><\/p>\n<p>F\u00f8rst skal vi g\u00e5 til <strong>Dashboard \u2192 Opret nyt dashboard \u2192 opret nyt \u2192 Cirkeldashboard.<\/strong><\/p>\n<p><\/p>\n<p>S\u00e6t typen til indeksm\u00f8nsteret, og ber\u00f8r derefter navnet p\u00e5 din bit.<\/p>\n<p><\/p>\n<p>Tryk p\u00e5 Enter. P\u00e5 dette tidspunkt skal du se en gr\u00f8n donut.<\/p>\n<p><\/p>\n<p>I fanen Buckets til venstre finder du:<\/p>\n<p><\/p>\n<p><img decoding=\"async\" alt=\"ELK SIEM Open Distro: Visualisering af informationspaneler ELK og SIEM i ELK\" src=\"\/wp-content\/uploads\/2020\/08\/432dd674f142ee33b4e248621638b9e8.png\" style=\"display:block;margin: 0 auto;\" \/><\/p>\n<p><\/p>\n<p> \u2014 Split slices vil opdele donuten i forskellige dele baseret p\u00e5 dataspredning.<\/p>\n<p><\/p>\n<p> \u2014 Split Chart vil oprette endnu en donut ved siden af denne. <\/p>\n<p><\/p>\n<p>Vi vil bruge splitted slices.<\/p>\n<p><\/p>\n<p>Vi vil visualisere vores data afh\u00e6ngigt af det valgte udtryk. I dette tilf\u00e6lde vil udtrykket referere til MITER ATT &amp; CK.<\/p>\n<p><\/p>\n<p>I Winlogbeat er feltet, der vil give os disse oplysninger, kaldet:<\/p>\n<p><\/p>\n<pre><code class=\"plaintext\">winlog.event_data.RuleName<\/code><\/pre>\n<p><\/p>\n<p><strong>Vi vil indstille en t\u00e6llemetrik for at sortere begivenheder baseret p\u00e5, hvor mange gange de optr\u00e6der.<\/strong><\/p>\n<p><\/p>\n<p>Aktiver funktionen \"Grupper andre v\u00e6rdier i et separat segment\".<\/p>\n<p><\/p>\n<p>Dette vil v\u00e6re praktisk, hvis de valgte termer har mange forskellige betydninger, der kommer fra rytmen. Det hj\u00e6lper med at visualisere de \u00f8vrige data som en helhed. Dette vil give dig et indtryk af procentdelen af de \u00f8vrige begivenheder.<\/p>\n<p><\/p>\n<p>Nu hvor vi er f\u00e6rdige med at indstille datatabellen, lad os g\u00e5 videre til indstillingsfanen.<\/p>\n<p><\/p>\n<p>Du skal udf\u00f8re f\u00f8lgende:<\/p>\n<p><\/p>\n<p>** Fjern donut-formen, s\u00e5 den fulde cirkel vises i visualiseringen.<\/p>\n<p><\/p>\n<p>** V\u00e6lg en legendeplacering, som du kan lide. I dette tilf\u00e6lde vil vi vise dem til h\u00f8jre.<\/p>\n<p><\/p>\n<p>** Indstil visningsv\u00e6rdierne, s\u00e5 de vises ved siden af deres segment for lettere l\u00e6sning, og lad de \u00f8vrige v\u00e6re som standard.<\/p>\n<p><\/p>\n<p><img decoding=\"async\" alt=\"ELK SIEM Open Distro: Visualisering af informationspaneler ELK og SIEM i ELK\" src=\"\/wp-content\/uploads\/2020\/08\/9b2e230247a5277c198f196e96e5f6da.png\" style=\"display:block;margin: 0 auto;\" \/><\/p>\n<p><\/p>\n<p><strong>Afsk\u00e6ring bestemmer, hvor meget du vil vise af begivenhedsnavnet.<\/strong><\/p>\n<p><\/p>\n<p>Indstil tiden, hvor visualiseringen skal starte, og klik derefter p\u00e5 den bl\u00e5 firkant.<\/p>\n<p><\/p>\n<p>Du skal ende op med noget der ligner:<\/p>\n<p><\/p>\n<p><img decoding=\"async\" alt=\"ELK SIEM Open Distro: Visualisering af informationspaneler ELK og SIEM i ELK\" src=\"\/wp-content\/uploads\/2020\/08\/b89f5bf6aee38ff9019540b5f72b6c4c.png\" style=\"display:block;margin: 0 auto;\" \/><\/p>\n<p><\/p>\n<p>Du kan ogs\u00e5 tilf\u00f8je et filter til din visualisering for at filtrere en bestemt v\u00e6rt, som du \u00f8nsker at tjekke, eller enhver parameter, som du mener er nyttig til dit form\u00e5l. Visualiseringen vil kun vise data, der svarer til reglen i filteret. I dette tilf\u00e6lde vil vi vise MITER ATT &amp; CK data, der kun kommer fra v\u00e6rten med navnet win10.<\/p>\n<p><\/p>\n<p><img decoding=\"async\" alt=\"ELK SIEM Open Distro: Visualisering af informationspaneler ELK og SIEM i ELK\" src=\"\/wp-content\/uploads\/2020\/08\/aa6b4716d7e2cd27c9cc6b1a4acb25ae.png\" style=\"display:block;margin: 0 auto;\" \/><\/p>\n<p><\/p>\n<h4 id=\"32--sozdanie-vashey-pervoy-informacionnoy-paneli\">3\u20132- Oprettelse af dit f\u00f8rste dashboard:<\/h4>\n<p><\/p>\n<p>Et dashboard er en samling af flere visualiseringer. Dine dashboards skal v\u00e6re klare, forst\u00e5elige og indeholde nyttige og bestemte data. Her er et eksempel p\u00e5 dashboards, som vi har oprettet fra bunden for winlogbeat.<\/p>\n<p><\/p>\n<p><img decoding=\"async\" alt=\"ELK SIEM Open Distro: Visualisering af informationspaneler ELK og SIEM i ELK\" src=\"\/wp-content\/uploads\/2020\/08\/d2da07c7fce7a96fa754c709bdedb8a0.png\" style=\"display:block;margin: 0 auto;\" \/><\/p>\n<p><\/p>\n<p>Tak for din tid. Jeg h\u00e5ber, at denne artikel har v\u00e6ret nyttig for dig. Hvis du \u00f8nsker mere information om emnet, anbefaler vi, at du bes\u00f8ger <noindex><a rel=\"nofollow\" href=\"https:\/\/www.elastic.co\/guide\/en\/kibana\/current\/tutorial-visualizing.html\">den officielle hjemmeside<\/a><\/noindex>.<\/p>\n<p><\/p>\n<p>Telegramchat om Elasticsearch: <noindex><a rel=\"nofollow\" href=\"https:\/\/t.me\/elasticsearch_ru\">https:\/\/t.me\/elasticsearch_ru<\/a><\/noindex><\/p>\n<p>Kilde: <a content=\"nofollow\" rel=\"nofollow\" href=\"https:\/\/habr.com\/ru\/post\/516050\/\">habr.com<\/a> <\/p>","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"excerpt":{"rendered":"<p>\u0412 \u044d\u0442\u043e\u043c \u043f\u043e\u0441\u0442\u0435 \u0431\u0443\u0434\u0435\u0442 \u043e\u043f\u0438\u0441\u0430\u043d\u0430 \u043d\u0430\u0441\u0442\u0440\u043e\u0439\u043a\u0430 \u0432\u0438\u0437\u0443\u0430\u043b\u0438\u0437\u0430\u0446\u0438\u0438 \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u043e\u043d\u043d\u044b\u0445 \u043f\u0430\u043d\u0435\u043b\u0435\u0439 ELK \u0438 SIEM \u0432 ELK \u0421\u0442\u0430\u0442\u044c\u044f \u0440\u0430\u0437\u0434\u0435\u043b\u0435\u043d\u0430 \u043d\u0430 \u0441\u043b\u0435\u0434\u0443\u044e\u0449\u0438\u0435 \u0440\u0430\u0437\u0434\u0435\u043b\u044b: 1- \u041e\u0431\u0437\u043e\u0440 ELK SIEM 2- \u0414\u0430\u0448\u0431\u043e\u0440\u0434\u044b \u043f\u043e \u0443\u043c\u043e\u043b\u0447\u0430\u043d\u0438\u044e 3- \u0421\u043e\u0437\u0434\u0430\u043d\u0438\u0435 \u0432\u0430\u0448\u0438\u0445 \u043f\u0435\u0440\u0432\u044b\u0445 \u0434\u0430\u0448\u0431\u043e\u0440\u0434\u043e\u0432 \u041e\u0433\u043b\u0430\u0432\u043b\u0435\u043d\u0438\u0435 \u0432\u0441\u0435\u0445 \u043f\u043e\u0441\u0442\u043e\u0432. \u0412\u0432\u0435\u0434\u0435\u043d\u0438\u0435. \u0420\u0430\u0437\u0432\u0435\u0440\u0442\u044b\u0432\u0430\u043d\u0438\u0435 \u0438\u043d\u0444\u0440\u0430\u0441\u0442\u0440\u0443\u043a\u0442\u0443\u0440\u044b \u0438 \u0442\u0435\u0445\u043d\u043e\u043b\u043e\u0433\u0438\u0439 \u0434\u043b\u044f SOC \u043a\u0430\u043a Service (SOCasS) ELK stack \u2014 \u0443\u0441\u0442\u0430\u043d\u043e\u0432\u043a\u0430 \u0438 \u043d\u0430\u0441\u0442\u0440\u043e\u0439\u043a\u0430 \u041f\u0440\u043e\u0433\u0443\u043b\u043a\u0430 \u043f\u043e open Distro [&hellip;]<\/p>\n","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"author":1,"featured_media":92076,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[688],"tags":[],"class_list":["post-92075","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-administrirovanie"],"aioseo_notices":[],"aioseo_head":"\n\t\t<!-- All in One SEO 5.0.3 - aioseo.com -->\n\t<meta name=\"description\" content=\"\u0412 \u044d\u0442\u043e\u043c \u043f\u043e\u0441\u0442\u0435 \u0431\u0443\u0434\u0435\u0442 \u043e\u043f\u0438\u0441\u0430\u043d\u0430 \u043d\u0430\u0441\u0442\u0440\u043e\u0439\u043a\u0430 \u0432\u0438\u0437\u0443\u0430\u043b\u0438\u0437\u0430\u0446\u0438\u0438 \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u043e\u043d\u043d\u044b\u0445 \u043f\u0430\u043d\u0435\u043b\u0435\u0439 ELK \u0438 SIEM \u0432 ELK \u0421\u0442\u0430\u0442\u044c\u044f \u0440\u0430\u0437\u0434\u0435\u043b\u0435\u043d\u0430 \u043d\u0430 \u0441\u043b\u0435\u0434\u0443\u044e\u0449\u0438\u0435 \u0440\u0430\u0437\u0434\u0435\u043b\u044b: 1- \u041e\u0431\u0437\u043e\u0440 ELK SIEM 2- \u0414\u0430\u0448\u0431\u043e\u0440\u0434\u044b \u043f\u043e \u0443\u043c\u043e\u043b\u0447\u0430\u043d\u0438\u044e 3- \u0421\u043e\u0437\u0434\u0430\u043d\u0438\u0435 \u0432\u0430\u0448\u0438\u0445.\" \/>\n\t<meta name=\"robots\" content=\"max-image-preview:large\" \/>\n\t<meta name=\"author\" content=\"Yuri Gagarin\"\/>\n\t<link rel=\"canonical\" href=\"https:\/\/prohoster.info\/da\/blog\/administrirovanie\/elk-siem-open-distro-vizualizacziya-informaczionnyh-panelej-elk-i-siem-v-elk\" \/>\n\t\t<meta name=\"generator\" content=\"All in One SEO (AIOSEO) 5.0.3\" \/>\n\t\t<meta property=\"og:locale\" content=\"da_DK\" \/>\n\t\t<meta property=\"og:site_name\" content=\"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b\" \/>\n\t\t<meta property=\"og:type\" content=\"article\" \/>\n\t\t<meta property=\"og:title\" content=\"\ud83e\udd47ELK SIEM Open Distro: \u0412\u0438\u0437\u0443\u0430\u043b\u0438\u0437\u0430\u0446\u0438\u044f \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u043e\u043d\u043d\u044b\u0445 \u043f\u0430\u043d\u0435\u043b\u0435\u0439 ELK \u0438 SIEM \u0432 ELK | ProHoster\" \/>\n\t\t<meta property=\"og:description\" content=\"\u0412 \u044d\u0442\u043e\u043c \u043f\u043e\u0441\u0442\u0435 \u0431\u0443\u0434\u0435\u0442 \u043e\u043f\u0438\u0441\u0430\u043d\u0430 \u043d\u0430\u0441\u0442\u0440\u043e\u0439\u043a\u0430 \u0432\u0438\u0437\u0443\u0430\u043b\u0438\u0437\u0430\u0446\u0438\u0438 \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u043e\u043d\u043d\u044b\u0445 \u043f\u0430\u043d\u0435\u043b\u0435\u0439 ELK \u0438 SIEM \u0432 ELK \u0421\u0442\u0430\u0442\u044c\u044f \u0440\u0430\u0437\u0434\u0435\u043b\u0435\u043d\u0430 \u043d\u0430 \u0441\u043b\u0435\u0434\u0443\u044e\u0449\u0438\u0435 \u0440\u0430\u0437\u0434\u0435\u043b\u044b: 1- \u041e\u0431\u0437\u043e\u0440 ELK SIEM 2- \u0414\u0430\u0448\u0431\u043e\u0440\u0434\u044b \u043f\u043e \u0443\u043c\u043e\u043b\u0447\u0430\u043d\u0438\u044e 3- \u0421\u043e\u0437\u0434\u0430\u043d\u0438\u0435 \u0432\u0430\u0448\u0438\u0445.\" \/>\n\t\t<meta property=\"og:url\" content=\"https:\/\/prohoster.info\/da\/blog\/administrirovanie\/elk-siem-open-distro-vizualizacziya-informaczionnyh-panelej-elk-i-siem-v-elk\" \/>\n\t\t<meta property=\"og:image\" content=\"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg\" \/>\n\t\t<meta property=\"og:image:secure_url\" content=\"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg\" \/>\n\t\t<meta property=\"og:image:width\" content=\"350\" \/>\n\t\t<meta property=\"og:image:height\" content=\"350\" \/>\n\t\t<meta property=\"article:published_time\" content=\"2020-08-22T17:42:03+00:00\" \/>\n\t\t<meta property=\"article:modified_time\" content=\"2020-08-22T17:42:03+00:00\" \/>\n\t\t<meta property=\"article:publisher\" content=\"https:\/\/www.facebook.com\/prohoster\" \/>\n\t\t<meta property=\"article:author\" content=\"https:\/\/www.facebook.com\/prohoster\" \/>\n\t\t<!-- All in One SEO -->\n\n","aioseo_head_json":{"title":"\ud83e\udd47ELK SIEM Open Distro: Visualisering af ELK og SIEM dashboards i ELK | ProHoster","description":"I dette indl\u00e6g vil ops\u00e6tning af visualiseringer af ELK og SIEM dashboards i ELK blive beskrevet. Artiklen er opdelt i f\u00f8lgende afsnit: 1- Overblik over ELK SIEM 2- Standard dashboards 3- Oprettelse af dine.","canonical_url":"https:\/\/prohoster.info\/da\/blog\/administrirovanie\/elk-siem-open-distro-vizualizacziya-informaczionnyh-panelej-elk-i-siem-v-elk","robots":"max-image-preview:large","keywords":"","webmasterTools":{"miscellaneous":""},"schema":null,"og:locale":"da_DK","og:site_name":"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b","og:type":"article","og:title":"\ud83e\udd47ELK SIEM Open Distro: \u0412\u0438\u0437\u0443\u0430\u043b\u0438\u0437\u0430\u0446\u0438\u044f \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u043e\u043d\u043d\u044b\u0445 \u043f\u0430\u043d\u0435\u043b\u0435\u0439 ELK \u0438 SIEM \u0432 ELK | ProHoster","og:description":"\u0412 \u044d\u0442\u043e\u043c \u043f\u043e\u0441\u0442\u0435 \u0431\u0443\u0434\u0435\u0442 \u043e\u043f\u0438\u0441\u0430\u043d\u0430 \u043d\u0430\u0441\u0442\u0440\u043e\u0439\u043a\u0430 \u0432\u0438\u0437\u0443\u0430\u043b\u0438\u0437\u0430\u0446\u0438\u0438 \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u043e\u043d\u043d\u044b\u0445 \u043f\u0430\u043d\u0435\u043b\u0435\u0439 ELK \u0438 SIEM \u0432 ELK \u0421\u0442\u0430\u0442\u044c\u044f \u0440\u0430\u0437\u0434\u0435\u043b\u0435\u043d\u0430 \u043d\u0430 \u0441\u043b\u0435\u0434\u0443\u044e\u0449\u0438\u0435 \u0440\u0430\u0437\u0434\u0435\u043b\u044b: 1- \u041e\u0431\u0437\u043e\u0440 ELK SIEM 2- \u0414\u0430\u0448\u0431\u043e\u0440\u0434\u044b \u043f\u043e \u0443\u043c\u043e\u043b\u0447\u0430\u043d\u0438\u044e 3- \u0421\u043e\u0437\u0434\u0430\u043d\u0438\u0435 \u0432\u0430\u0448\u0438\u0445.","og:url":"https:\/\/prohoster.info\/da\/blog\/administrirovanie\/elk-siem-open-distro-vizualizacziya-informaczionnyh-panelej-elk-i-siem-v-elk","og:image":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:secure_url":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:width":350,"og:image:height":350,"article:published_time":"2020-08-22T17:42:03+00:00","article:modified_time":"2020-08-22T17:42:03+00:00","article:publisher":"https:\/\/www.facebook.com\/prohoster","article:author":"https:\/\/www.facebook.com\/prohoster"},"aioseo_meta_data":{"post_id":"92075","title":null,"description":null,"keywords":null,"keyphrases":null,"primary_term":null,"canonical_url":null,"og_title":null,"og_description":null,"og_object_type":"default","og_image_type":"default","og_image_url":null,"og_image_width":null,"og_image_height":null,"og_image_custom_url":null,"og_image_custom_fields":null,"og_video":null,"og_custom_url":null,"og_article_section":null,"og_article_tags":null,"twitter_use_og":false,"twitter_card":"default","twitter_image_type":"default","twitter_image_url":null,"twitter_image_custom_url":null,"twitter_image_custom_fields":null,"twitter_title":null,"twitter_description":null,"schema":{"blockGraphs":[],"customGraphs":[],"default":{"data":{"Article":[],"Course":[],"Dataset":[],"FAQPage":[],"Movie":[],"Person":[],"Product":[],"ProductReview":[],"Car":[],"Recipe":[],"Service":[],"SoftwareApplication":[],"WebPage":[]},"graphName":"","isEnabled":true},"graphs":[]},"schema_type":null,"schema_type_options":null,"pillar_content":false,"robots_default":true,"robots_noindex":false,"robots_noarchive":false,"robots_nosnippet":false,"robots_nofollow":false,"robots_noimageindex":false,"robots_noodp":false,"robots_notranslate":false,"robots_max_snippet":null,"robots_max_videopreview":null,"robots_max_imagepreview":"large","priority":null,"frequency":null,"local_seo":null,"seo_analyzer_scan_date":null,"breadcrumb_settings":null,"limit_modified_date":false,"reviewed_by":null,"ai":null,"created":"2021-02-28 12:15:36","updated":"2022-09-27 16:41:20","focus_keyword":null,"additional_keywords":null,"truseo_locale":null},"gt_translate_keys":[{"key":"link","format":"url"}],"_links":{"self":[{"href":"https:\/\/prohoster.info\/da\/wp-json\/wp\/v2\/posts\/92075","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/prohoster.info\/da\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/prohoster.info\/da\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/prohoster.info\/da\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/prohoster.info\/da\/wp-json\/wp\/v2\/comments?post=92075"}],"version-history":[{"count":0,"href":"https:\/\/prohoster.info\/da\/wp-json\/wp\/v2\/posts\/92075\/revisions"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/prohoster.info\/da\/wp-json\/wp\/v2\/media\/92076"}],"wp:attachment":[{"href":"https:\/\/prohoster.info\/da\/wp-json\/wp\/v2\/media?parent=92075"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/prohoster.info\/da\/wp-json\/wp\/v2\/categories?post=92075"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/prohoster.info\/da\/wp-json\/wp\/v2\/tags?post=92075"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}