{"id":92075,"date":"2020-08-22T19:42:03","date_gmt":"2020-08-22T17:42:03","guid":{"rendered":"https:\/\/prohoster.info\/blog\/administrirovanie\/elk-siem-open-distro-vizualizacziya-informaczionnyh-panelej-elk-i-siem-v-elk"},"modified":"2020-08-22T19:42:03","modified_gmt":"2020-08-22T17:42:03","slug":"elk-siem-open-distro-vizualizacziya-informaczionnyh-panelej-elk-i-siem-v-elk","status":"publish","type":"post","link":"https:\/\/prohoster.info\/et\/blog\/administrirovanie\/elk-siem-open-distro-vizualizacziya-informaczionnyh-panelej-elk-i-siem-v-elk","title":{"rendered":"ELK SIEM Open Distro: ELK ja SIEM andmete visualiseerimine ELK-s","gt_translate_keys":[{"key":"rendered","format":"text"}]},"content":{"rendered":"<p>Selles postituses k\u00e4sitletakse ELK ja SIEM andmete visualiseerimise seadistamist ELK-s<br \/>\nArtikkel on jaotatud j\u00e4rgmistesse osadesse:<\/p>\n<p><\/p>\n<p>1- ELK SIEM \u00fclevaade<br \/>\n2- Vaikimisi armatuurlaud<br \/>\n3- Teie esimeste armatuurlaudade loomine<\/p>\n<p><noindex><a rel=\"nofollow\" name=\"habracut\"><\/a><\/noindex><\/p>\n<p>Postituste sisukord.<\/p>\n<p><\/p>\n<ul>\n<li><noindex><a rel=\"nofollow\" href=\"https:\/\/habr.com\/ru\/post\/515576\/\">Sissejuhatus. SOC-as-a-Service (SOCasS) infrastruktuuri ja tehnoloogiate seadistamine<\/a><\/noindex><\/li>\n<li><noindex><a rel=\"nofollow\" href=\"https:\/\/habr.com\/ru\/post\/515722\/\">ELK stack \u2014 paigaldamine ja seadistamine<\/a><\/noindex><\/li>\n<li><noindex><a rel=\"nofollow\" href=\"https:\/\/habr.com\/ru\/post\/515920\/\">Ringk\u00e4ik open Distro-s<\/a><\/noindex><\/li>\n<li><noindex><a rel=\"nofollow\" href=\"https:\/\/habr.com\/ru\/post\/516050\/\">Dashboards ja ELK SIEM visualiseerimine<\/a><\/noindex><\/li>\n<li>Integreerimine WAZUH-iga<\/li>\n<li>Teavitamine (Alerting)<\/li>\n<li>Aruandlus<\/li>\n<li>Juhtumihaldus<\/li>\n<\/ul>\n<p><\/p>\n<h3 id=\"1-obzor-elk-siem\">1- ELK SIEM \u00fclevaade<\/h3>\n<p><\/p>\n<p>ELK SIEM lisati hiljuti ELK stacki versioonis 7.2, mis ilmus 25. juunil 2019.<\/p>\n<p><\/p>\n<p>See on elastic.co loodud SIEM-lahendus, et muuta turbeanal\u00fc\u00fctiku elu oluliselt lihtsamaks ja v\u00e4hem kurnavaks.<\/p>\n<p><\/p>\n<p>Oma t\u00f6\u00f6versioonis otsustasime luua oma SIEM-i ja valida oma juhtpaneeli.<\/p>\n<p><\/p>\n<p>Kuid peame k\u00f5igepealt ELK SIEM-i uurimist oluliseks.<\/p>\n<p><\/p>\n<h4 id=\"11--razdel-host-events\">1.1- Host events jaotis<\/h4>\n<p><\/p>\n<p>Esmalt vaatame host-osa. Host-jaotis v\u00f5imaldab teil n\u00e4ha s\u00fcndmusi, mis genereeritakse endapunktis.<\/p>\n<p><\/p>\n<p><img decoding=\"async\" alt=\"ELK SIEM Open Distro: ELK ja SIEM andmete visualiseerimine ELK-s\" src=\"\/wp-content\/uploads\/2020\/08\/54ebe976e6479930ca8d20cfacdc0d8d.png\" style=\"display:block;margin: 0 auto;\" \/><\/p>\n<p><\/p>\n<p><img decoding=\"async\" alt=\"ELK SIEM Open Distro: ELK ja SIEM andmete visualiseerimine ELK-s\" src=\"\/wp-content\/uploads\/2020\/08\/e0862fafaa4ad1ba34714339a33c698f.png\" style=\"display:block;margin: 0 auto;\" \/><\/p>\n<p><\/p>\n<p>P\u00e4rast hostide vaatamise klikkimist peaksite n\u00e4gema midagi sellist. Nagu n\u00e4ete, on kolm hosti \u00fchendatud selle arvutiga:<\/p>\n<p><\/p>\n<p>1 Windows 10.<\/p>\n<p><\/p>\n<p>2 Ubuntu 18.04 server.<\/p>\n<p><\/p>\n<p>Meil on mitu visualiseerimist, millest iga\u00fcks n\u00e4itab erinevaid t\u00fc\u00fcpe s\u00fcndmustest.<\/p>\n<p><\/p>\n<p>N\u00e4iteks see, mis on keskel, n\u00e4itab logimisandmeid k\u00f5igil kolmel masinal.<\/p>\n<p><\/p>\n<p>See andmemassiiv, mida siin n\u00e4ete, on kogutud viie p\u00e4eva jooksul. See seletab suurt hulka eba\u00f5nnestunud ja edukaid sisselogimisi. T\u00f5en\u00e4oliselt on teil v\u00e4he logisaatmist, seega \u00e4rge muretsege.<\/p>\n<p><\/p>\n<h4 id=\"12--razdel-setevyh-sobytiy\">1.2- V\u00f5rgu\u00fcrituste jaotis<\/h4>\n<p><\/p>\n<p>Liikudes v\u00f5rgujaotisse, peaksite n\u00e4gema midagi sellist. See jaotis v\u00f5imaldab teil t\u00e4helepanelikult j\u00e4lgida k\u00f5ike, mis teie v\u00f5rgus toimub, alates HTTP \/ TLS liiklusest kuni DNS-i liikluseni ja v\u00e4liste s\u00fcndmuste teavitusteni.<\/p>\n<p><\/p>\n<p><img decoding=\"async\" alt=\"ELK SIEM Open Distro: ELK ja SIEM andmete visualiseerimine ELK-s\" src=\"\/wp-content\/uploads\/2020\/08\/3ebae3d5e85dd84556eb26901c2fd519.png\" style=\"display:block;margin: 0 auto;\" \/><\/p>\n<p><\/p>\n<p><img decoding=\"async\" alt=\"ELK SIEM Open Distro: ELK ja SIEM andmete visualiseerimine ELK-s\" src=\"\/wp-content\/uploads\/2020\/08\/344db7fac06acabaa011657debb52993.png\" style=\"display:block;margin: 0 auto;\" \/><\/p>\n<p><\/p>\n<h3 id=\"2--dashbordy-po-umolchaniyu\">2- Vaikimisi armatuurlaud<\/h3>\n<p><\/p>\n<p>Kasutajate elu lihtsustamiseks on elastic.co arendajad loonud vaikimisi juhtpaneeli, mida ametlikult toetab ELK. Meie bitid ei olnud sellest reeglist erandiks. Siin v\u00f5tan n\u00e4iteks vaikimisi Packetbeat juhtpaneeli.<\/p>\n<p><\/p>\n<p>Kui olete artikli teise sammu \u00f5igesti t\u00e4itnud, peaks teil olema seadistatud armatuurlaud, mis teid ootab. Nii et laseme alustada.<\/p>\n<p><\/p>\n<p>Vasakul Kibanas valige armatuuri s\u00fcmbol. See on kolmas, kui lugeda \u00fclevalt.<\/p>\n<p><\/p>\n<p>Sisestage jaotuse nimi otsinguv\u00e4ljal<\/p>\n<p><\/p>\n<p>Kui bitil on mitu moodulit, luuakse iga\u00fche jaoks juhtpaneel. Kuid ainult see, kellel on moodul aktiivne, kuvab mitte-t\u00fchjad andmed.<\/p>\n<p><\/p>\n<p>Valige see, millel on teie mooduli nimi.<\/p>\n<p><\/p>\n<p>See on p\u00f5hitemplaat <strong>PacketBeat<\/strong>.<\/p>\n<p><\/p>\n<p><img decoding=\"async\" alt=\"ELK SIEM Open Distro: ELK ja SIEM andmete visualiseerimine ELK-s\" src=\"\/wp-content\/uploads\/2020\/08\/f895c527f746c6df4c7e4e43c4eee802.png\" style=\"display:block;margin: 0 auto;\" \/><\/p>\n<p><\/p>\n<p>See on v\u00f5rguandmete juhtpaneel. See annab meile teavet sissetulevate ja v\u00e4ljaminevate paketide kohta, IP-aadresside allikate ja sihtkohtade kohta ning palju kasulikku teavet turvakeskuse anal\u00fc\u00fctikule.<\/p>\n<p><\/p>\n<p><img decoding=\"async\" alt=\"ELK SIEM Open Distro: ELK ja SIEM andmete visualiseerimine ELK-s\" src=\"\/wp-content\/uploads\/2020\/08\/1d319ebf0865ea4ad18c9f1a10d6182d.png\" style=\"display:block;margin: 0 auto;\" \/><\/p>\n<p><\/p>\n<p><img decoding=\"async\" alt=\"ELK SIEM Open Distro: ELK ja SIEM andmete visualiseerimine ELK-s\" src=\"\/wp-content\/uploads\/2020\/08\/fb4f7078d667bc3c402198c2c58c293d.png\" style=\"display:block;margin: 0 auto;\" \/><\/p>\n<p><\/p>\n<h3 id=\"3---sozdanie-vashih-pervyh-dashbordov\">3 \u2014 Teie esimestel armatuurlaudade loomine<\/h3>\n<p><\/p>\n<h4 id=\"31--osnovnye-ponyatiya\">3\u20131- P\u00f5hikontseptsioonid<\/h4>\n<p><\/p>\n<p><strong>A- Armatuurlaudade t\u00fc\u00fcbid:<\/strong><\/p>\n<p><\/p>\n<p>Need on erinevad visualiseerimise t\u00fc\u00fcbid, mida saate oma andmete visualiseerimiseks kasutada.<\/p>\n<p><\/p>\n<p>n\u00e4iteks meil on:<\/p>\n<p><\/p>\n<ul>\n<li>Histogramm<\/li>\n<li>Kaart<\/li>\n<li>Markdowni vidin<\/li>\n<li>Ringdiagramm<\/li>\n<\/ul>\n<p><\/p>\n<p><img decoding=\"async\" alt=\"ELK SIEM Open Distro: ELK ja SIEM andmete visualiseerimine ELK-s\" src=\"\/wp-content\/uploads\/2020\/08\/63a8cbb26fe1caa4c224fffca02a58ad.png\" style=\"display:block;margin: 0 auto;\" \/><\/p>\n<p><\/p>\n<p><strong>B- KQL (Kibana p\u00e4ringukeel):<\/strong><\/p>\n<p><\/p>\n<p>See on keel, mida kasutatakse Kibanasse andmete mugavaks otsimiseks. See v\u00f5imaldab teil kontrollida, kas teatud andmed eksisteerivad, ja palju muid kasulikke funktsioone. Lisainformatsiooni saamiseks v\u00f5ite uurida teavet sellel lingil<\/p>\n<p><\/p>\n<p><noindex><a rel=\"nofollow\" href=\"https:\/\/www.elastic.co\/guide\/en\/kibana\/current\/kuery-query.html\">https:\/\/www.elastic.co\/guide\/en\/kibana\/current\/kuery-query.html<\/a><\/noindex><\/p>\n<p><\/p>\n<p>See on n\u00e4ide p\u00e4ringust, et otsida Windows 10 pro s\u00fcsteemiga hosti.<\/p>\n<p><\/p>\n<p><img decoding=\"async\" alt=\"ELK SIEM Open Distro: ELK ja SIEM andmete visualiseerimine ELK-s\" src=\"\/wp-content\/uploads\/2020\/08\/2785f9afe1dfe463ad6b56febcfa04b8.png\" style=\"display:block;margin: 0 auto;\" \/><\/p>\n<p><\/p>\n<p><strong>C- Filtrid:<\/strong><\/p>\n<p><\/p>\n<p>See funktsioon v\u00f5imaldab teil filtreerida teatud parameetreid, n\u00e4iteks hostinime, koodi v\u00f5i s\u00fcndmuse identifikaatorit jne. Filtrid parendavad uurimisfaasi oluliselt ajas ja t\u00f6\u00f6j\u00f5us, mis kulub t\u00f5endite otsimiseks.<\/p>\n<p><\/p>\n<p><strong>D- Esimene visualiseerimine:<\/strong><\/p>\n<p><\/p>\n<p>Loome visualiseerimise MITER ATT &amp; CK jaoks.<\/p>\n<p><\/p>\n<p>Esmalt peame minema <strong>Armatuurlaud \u2192 Loo uus armatuurlaud \u2192 looge uus \u2192 Ringdiagrammi armatuurlaud<\/strong><\/p>\n<p><\/p>\n<p>M\u00e4\u00e4rake t\u00fc\u00fcp indeksimustrile, seej\u00e4rel puudutage oma biti nime.<\/p>\n<p><\/p>\n<p>Pange Enter. Selleks ajaks peaksite n\u00e4gema rohelist donut.<\/p>\n<p><\/p>\n<p>Buckets vahekaardil leiate:<\/p>\n<p><\/p>\n<p><img decoding=\"async\" alt=\"ELK SIEM Open Distro: ELK ja SIEM andmete visualiseerimine ELK-s\" src=\"\/wp-content\/uploads\/2020\/08\/432dd674f142ee33b4e248621638b9e8.png\" style=\"display:block;margin: 0 auto;\" \/><\/p>\n<p><\/p>\n<p> \u2014 Split slices jagab donuti erinevateks osadeks andmete leviku p\u00f5hjal.<\/p>\n<p><\/p>\n<p> \u2014 Split Chart loob veel \u00fche donuti k\u00f5rval. <\/p>\n<p><\/p>\n<p>Me kasutame jagatud viilude.<\/p>\n<p><\/p>\n<p>Visualiseerime oma andmeid vastavalt meie valitud terminile. Antud juhul viitab termin MITER ATT &amp; CK-le.<\/p>\n<p><\/p>\n<p>Winlogbeat'is on v\u00e4li, mis annab meile selle teabe, nimega:<\/p>\n<p><\/p>\n<pre><code class=\"plaintext\">winlog.event_data.RuleName<\/code><\/pre>\n<p><\/p>\n<p><strong>Seame m\u00f5\u00f5detuks loenduse, et j\u00e4rjestada s\u00fcndmusi vastavalt nende ilmumiste arvule.<\/strong><\/p>\n<p><\/p>\n<p>L\u00fclitage sisse funktsioon \u201cGrupita teisi v\u00e4\u00e4rtusi eraldi segmenti\u201d.<\/p>\n<p><\/p>\n<p>See on mugav, kui valitud terminidel on palju erinevaid t\u00e4hendusi, mis tulenevad r\u00fctmist. See aitab visualiseerida \u00fclej\u00e4\u00e4nud andmeid kui tervikut. See annab teile \u00fclevaate \u00fclej\u00e4\u00e4nud s\u00fcndmuste protsendist.<\/p>\n<p><\/p>\n<p>N\u00fc\u00fcd, kui oleme andmekaardi seaded l\u00f5petanud, l\u00e4heme seadete vahekaardile.<\/p>\n<p><\/p>\n<p>Te peate sooritama j\u00e4rgmised toimingud:<\/p>\n<p><\/p>\n<p>** Eemaldage donut diagramm, et visualiseerimisel kuvataks t\u00e4isring.<\/p>\n<p><\/p>\n<p>** Valige legendi positsioon, mis teile meeldib. Selles osas kuvame need paremal.<\/p>\n<p><\/p>\n<p>** M\u00e4\u00e4rake kuvamisv\u00e4\u00e4rtused, et need kuvataks koos nende segmentidega, et lugemist lihtsustada, ja j\u00e4tke \u00fclej\u00e4\u00e4nud vaikimisi.<\/p>\n<p><\/p>\n<p><img decoding=\"async\" alt=\"ELK SIEM Open Distro: ELK ja SIEM andmete visualiseerimine ELK-s\" src=\"\/wp-content\/uploads\/2020\/08\/9b2e230247a5277c198f196e96e5f6da.png\" style=\"display:block;margin: 0 auto;\" \/><\/p>\n<p><\/p>\n<p><strong>L\u00f5ikamine m\u00e4\u00e4rab, kui palju soovite s\u00fcndmuse nimest kuvada.<\/strong><\/p>\n<p><\/p>\n<p>M\u00e4\u00e4rake aeg, millest visualiseerimine peaks algama, ja seej\u00e4rel kl\u00f5psake sinise ruudu peal.<\/p>\n<p><\/p>\n<p>Te peaksite saama midagi sellist:<\/p>\n<p><\/p>\n<p><img decoding=\"async\" alt=\"ELK SIEM Open Distro: ELK ja SIEM andmete visualiseerimine ELK-s\" src=\"\/wp-content\/uploads\/2020\/08\/b89f5bf6aee38ff9019540b5f72b6c4c.png\" style=\"display:block;margin: 0 auto;\" \/><\/p>\n<p><\/p>\n<p>Samuti v\u00f5ite oma visualiseerimisele lisada filtri, et filtreerida kindlat hosti, mida soovite kontrollida, v\u00f5i mingeid parameetreid, mis teie arvates on teie eesm\u00e4rgiks kasulikud. Visualiseerimine kuvab ainult andmeid, mis vastavad filtreeritud reeglitele. Selles osas kuvame MITER ATT &amp; CK andmeid, mis tulevad ainult hostilt nimega win10.<\/p>\n<p><\/p>\n<p><img decoding=\"async\" alt=\"ELK SIEM Open Distro: ELK ja SIEM andmete visualiseerimine ELK-s\" src=\"\/wp-content\/uploads\/2020\/08\/aa6b4716d7e2cd27c9cc6b1a4acb25ae.png\" style=\"display:block;margin: 0 auto;\" \/><\/p>\n<p><\/p>\n<h4 id=\"32--sozdanie-vashey-pervoy-informacionnoy-paneli\">3\u20132- Teie esimese juhtpaneeli loomine:<\/h4>\n<p><\/p>\n<p>Juhtpaneel on mitmete visualiseerimiste kogum. Teie juhtpaneelid peaksid olema selged, arusaadavad ning sisaldama kasulikke ja m\u00e4\u00e4ratletud andmeid. Siin on n\u00e4ide juhtpaneelidest, mille oleme nullist loonud winlogbeat jaoks.<\/p>\n<p><\/p>\n<p><img decoding=\"async\" alt=\"ELK SIEM Open Distro: ELK ja SIEM andmete visualiseerimine ELK-s\" src=\"\/wp-content\/uploads\/2020\/08\/d2da07c7fce7a96fa754c709bdedb8a0.png\" style=\"display:block;margin: 0 auto;\" \/><\/p>\n<p><\/p>\n<p>Ait\u00e4h, et leidsite aega. Loodan, et see artikkel oli teile kasulik. Kui soovite rohkem teavet teema kohta, soovitame k\u00fclastada <noindex><a rel=\"nofollow\" href=\"https:\/\/www.elastic.co\/guide\/en\/kibana\/current\/tutorial-visualizing.html\">ametlik veebisait<\/a><\/noindex>.<\/p>\n<p><\/p>\n<p>Telegrami vestlus Elasticsearchi kohta: <noindex><a rel=\"nofollow\" href=\"https:\/\/t.me\/elasticsearch_ru\">https:\/\/t.me\/elasticsearch_ru<\/a><\/noindex><\/p>\n<p>Allikas: <a content=\"nofollow\" rel=\"nofollow\" href=\"https:\/\/habr.com\/ru\/post\/516050\/\">habr.com<\/a> <\/p>","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"excerpt":{"rendered":"<p>\u0412 \u044d\u0442\u043e\u043c \u043f\u043e\u0441\u0442\u0435 \u0431\u0443\u0434\u0435\u0442 \u043e\u043f\u0438\u0441\u0430\u043d\u0430 \u043d\u0430\u0441\u0442\u0440\u043e\u0439\u043a\u0430 \u0432\u0438\u0437\u0443\u0430\u043b\u0438\u0437\u0430\u0446\u0438\u0438 \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u043e\u043d\u043d\u044b\u0445 \u043f\u0430\u043d\u0435\u043b\u0435\u0439 ELK \u0438 SIEM \u0432 ELK \u0421\u0442\u0430\u0442\u044c\u044f \u0440\u0430\u0437\u0434\u0435\u043b\u0435\u043d\u0430 \u043d\u0430 \u0441\u043b\u0435\u0434\u0443\u044e\u0449\u0438\u0435 \u0440\u0430\u0437\u0434\u0435\u043b\u044b: 1- \u041e\u0431\u0437\u043e\u0440 ELK SIEM 2- \u0414\u0430\u0448\u0431\u043e\u0440\u0434\u044b \u043f\u043e \u0443\u043c\u043e\u043b\u0447\u0430\u043d\u0438\u044e 3- \u0421\u043e\u0437\u0434\u0430\u043d\u0438\u0435 \u0432\u0430\u0448\u0438\u0445 \u043f\u0435\u0440\u0432\u044b\u0445 \u0434\u0430\u0448\u0431\u043e\u0440\u0434\u043e\u0432 \u041e\u0433\u043b\u0430\u0432\u043b\u0435\u043d\u0438\u0435 \u0432\u0441\u0435\u0445 \u043f\u043e\u0441\u0442\u043e\u0432. \u0412\u0432\u0435\u0434\u0435\u043d\u0438\u0435. \u0420\u0430\u0437\u0432\u0435\u0440\u0442\u044b\u0432\u0430\u043d\u0438\u0435 \u0438\u043d\u0444\u0440\u0430\u0441\u0442\u0440\u0443\u043a\u0442\u0443\u0440\u044b \u0438 \u0442\u0435\u0445\u043d\u043e\u043b\u043e\u0433\u0438\u0439 \u0434\u043b\u044f SOC \u043a\u0430\u043a Service (SOCasS) ELK stack \u2014 \u0443\u0441\u0442\u0430\u043d\u043e\u0432\u043a\u0430 \u0438 \u043d\u0430\u0441\u0442\u0440\u043e\u0439\u043a\u0430 \u041f\u0440\u043e\u0433\u0443\u043b\u043a\u0430 \u043f\u043e open Distro [&hellip;]<\/p>\n","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"author":1,"featured_media":92076,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[688],"tags":[],"class_list":["post-92075","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-administrirovanie"],"aioseo_notices":[],"aioseo_head":"\n\t\t<!-- All in One SEO 5.0.1.1 - aioseo.com -->\n\t<meta name=\"description\" content=\"\u0412 \u044d\u0442\u043e\u043c \u043f\u043e\u0441\u0442\u0435 \u0431\u0443\u0434\u0435\u0442 \u043e\u043f\u0438\u0441\u0430\u043d\u0430 \u043d\u0430\u0441\u0442\u0440\u043e\u0439\u043a\u0430 \u0432\u0438\u0437\u0443\u0430\u043b\u0438\u0437\u0430\u0446\u0438\u0438 \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u043e\u043d\u043d\u044b\u0445 \u043f\u0430\u043d\u0435\u043b\u0435\u0439 ELK \u0438 SIEM \u0432 ELK \u0421\u0442\u0430\u0442\u044c\u044f \u0440\u0430\u0437\u0434\u0435\u043b\u0435\u043d\u0430 \u043d\u0430 \u0441\u043b\u0435\u0434\u0443\u044e\u0449\u0438\u0435 \u0440\u0430\u0437\u0434\u0435\u043b\u044b: 1- \u041e\u0431\u0437\u043e\u0440 ELK SIEM 2- \u0414\u0430\u0448\u0431\u043e\u0440\u0434\u044b \u043f\u043e \u0443\u043c\u043e\u043b\u0447\u0430\u043d\u0438\u044e 3- \u0421\u043e\u0437\u0434\u0430\u043d\u0438\u0435 \u0432\u0430\u0448\u0438\u0445.\" \/>\n\t<meta name=\"robots\" content=\"max-image-preview:large\" \/>\n\t<meta name=\"author\" content=\"Yuri Gagarin\"\/>\n\t<link rel=\"canonical\" href=\"https:\/\/prohoster.info\/et\/blog\/administrirovanie\/elk-siem-open-distro-vizualizacziya-informaczionnyh-panelej-elk-i-siem-v-elk\" \/>\n\t<meta name=\"generator\" content=\"All in One SEO (AIOSEO) 5.0.1.1\" \/>\n\t\t<meta property=\"og:locale\" content=\"et_EE\" \/>\n\t\t<meta property=\"og:site_name\" content=\"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b\" \/>\n\t\t<meta property=\"og:type\" content=\"article\" \/>\n\t\t<meta property=\"og:title\" content=\"\ud83e\udd47ELK SIEM Open Distro: \u0412\u0438\u0437\u0443\u0430\u043b\u0438\u0437\u0430\u0446\u0438\u044f \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u043e\u043d\u043d\u044b\u0445 \u043f\u0430\u043d\u0435\u043b\u0435\u0439 ELK \u0438 SIEM \u0432 ELK | ProHoster\" \/>\n\t\t<meta property=\"og:description\" content=\"\u0412 \u044d\u0442\u043e\u043c \u043f\u043e\u0441\u0442\u0435 \u0431\u0443\u0434\u0435\u0442 \u043e\u043f\u0438\u0441\u0430\u043d\u0430 \u043d\u0430\u0441\u0442\u0440\u043e\u0439\u043a\u0430 \u0432\u0438\u0437\u0443\u0430\u043b\u0438\u0437\u0430\u0446\u0438\u0438 \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u043e\u043d\u043d\u044b\u0445 \u043f\u0430\u043d\u0435\u043b\u0435\u0439 ELK \u0438 SIEM \u0432 ELK \u0421\u0442\u0430\u0442\u044c\u044f \u0440\u0430\u0437\u0434\u0435\u043b\u0435\u043d\u0430 \u043d\u0430 \u0441\u043b\u0435\u0434\u0443\u044e\u0449\u0438\u0435 \u0440\u0430\u0437\u0434\u0435\u043b\u044b: 1- \u041e\u0431\u0437\u043e\u0440 ELK SIEM 2- \u0414\u0430\u0448\u0431\u043e\u0440\u0434\u044b \u043f\u043e \u0443\u043c\u043e\u043b\u0447\u0430\u043d\u0438\u044e 3- \u0421\u043e\u0437\u0434\u0430\u043d\u0438\u0435 \u0432\u0430\u0448\u0438\u0445.\" \/>\n\t\t<meta property=\"og:url\" content=\"https:\/\/prohoster.info\/et\/blog\/administrirovanie\/elk-siem-open-distro-vizualizacziya-informaczionnyh-panelej-elk-i-siem-v-elk\" \/>\n\t\t<meta property=\"og:image\" content=\"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg\" \/>\n\t\t<meta property=\"og:image:secure_url\" content=\"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg\" \/>\n\t\t<meta property=\"og:image:width\" content=\"350\" \/>\n\t\t<meta property=\"og:image:height\" content=\"350\" \/>\n\t\t<meta property=\"article:published_time\" content=\"2020-08-22T17:42:03+00:00\" \/>\n\t\t<meta property=\"article:modified_time\" content=\"2020-08-22T17:42:03+00:00\" \/>\n\t\t<meta property=\"article:publisher\" content=\"https:\/\/www.facebook.com\/prohoster\" \/>\n\t\t<meta property=\"article:author\" content=\"https:\/\/www.facebook.com\/prohoster\" \/>\n\t\t<!-- All in One SEO -->\n\n","aioseo_head_json":{"title":"\ud83e\udd47ELK SIEM Open Distro: ELK ja SIEM juhtpaneelide visualiseerimine ELK | ProHoster","description":"Selles postituses kirjeldatakse ELK ja SIEM juhtpaneelide visualiseerimise seadistamist ELK. Artikkel on jagatud j\u00e4rgnevatesse osadesse: 1- ELK SIEM \u00fclevaade 2- Vaikimisi juhtpaneelid 3- Teie loomine.","canonical_url":"https:\/\/prohoster.info\/et\/blog\/administrirovanie\/elk-siem-open-distro-vizualizacziya-informaczionnyh-panelej-elk-i-siem-v-elk","robots":"max-image-preview:large","keywords":"","webmasterTools":{"miscellaneous":""},"schema":null,"og:locale":"et_EE","og:site_name":"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b","og:type":"article","og:title":"\ud83e\udd47ELK SIEM Open Distro: \u0412\u0438\u0437\u0443\u0430\u043b\u0438\u0437\u0430\u0446\u0438\u044f \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u043e\u043d\u043d\u044b\u0445 \u043f\u0430\u043d\u0435\u043b\u0435\u0439 ELK \u0438 SIEM \u0432 ELK | ProHoster","og:description":"\u0412 \u044d\u0442\u043e\u043c \u043f\u043e\u0441\u0442\u0435 \u0431\u0443\u0434\u0435\u0442 \u043e\u043f\u0438\u0441\u0430\u043d\u0430 \u043d\u0430\u0441\u0442\u0440\u043e\u0439\u043a\u0430 \u0432\u0438\u0437\u0443\u0430\u043b\u0438\u0437\u0430\u0446\u0438\u0438 \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u043e\u043d\u043d\u044b\u0445 \u043f\u0430\u043d\u0435\u043b\u0435\u0439 ELK \u0438 SIEM \u0432 ELK \u0421\u0442\u0430\u0442\u044c\u044f \u0440\u0430\u0437\u0434\u0435\u043b\u0435\u043d\u0430 \u043d\u0430 \u0441\u043b\u0435\u0434\u0443\u044e\u0449\u0438\u0435 \u0440\u0430\u0437\u0434\u0435\u043b\u044b: 1- \u041e\u0431\u0437\u043e\u0440 ELK SIEM 2- \u0414\u0430\u0448\u0431\u043e\u0440\u0434\u044b \u043f\u043e \u0443\u043c\u043e\u043b\u0447\u0430\u043d\u0438\u044e 3- \u0421\u043e\u0437\u0434\u0430\u043d\u0438\u0435 \u0432\u0430\u0448\u0438\u0445.","og:url":"https:\/\/prohoster.info\/et\/blog\/administrirovanie\/elk-siem-open-distro-vizualizacziya-informaczionnyh-panelej-elk-i-siem-v-elk","og:image":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:secure_url":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:width":350,"og:image:height":350,"article:published_time":"2020-08-22T17:42:03+00:00","article:modified_time":"2020-08-22T17:42:03+00:00","article:publisher":"https:\/\/www.facebook.com\/prohoster","article:author":"https:\/\/www.facebook.com\/prohoster"},"aioseo_meta_data":{"post_id":"92075","title":null,"description":null,"keywords":null,"keyphrases":null,"primary_term":null,"canonical_url":null,"og_title":null,"og_description":null,"og_object_type":"default","og_image_type":"default","og_image_url":null,"og_image_width":null,"og_image_height":null,"og_image_custom_url":null,"og_image_custom_fields":null,"og_video":null,"og_custom_url":null,"og_article_section":null,"og_article_tags":null,"twitter_use_og":false,"twitter_card":"default","twitter_image_type":"default","twitter_image_url":null,"twitter_image_custom_url":null,"twitter_image_custom_fields":null,"twitter_title":null,"twitter_description":null,"schema":{"blockGraphs":[],"customGraphs":[],"default":{"data":{"Article":[],"Course":[],"Dataset":[],"FAQPage":[],"Movie":[],"Person":[],"Product":[],"ProductReview":[],"Car":[],"Recipe":[],"Service":[],"SoftwareApplication":[],"WebPage":[]},"graphName":"","isEnabled":true},"graphs":[]},"schema_type":null,"schema_type_options":null,"pillar_content":false,"robots_default":true,"robots_noindex":false,"robots_noarchive":false,"robots_nosnippet":false,"robots_nofollow":false,"robots_noimageindex":false,"robots_noodp":false,"robots_notranslate":false,"robots_max_snippet":null,"robots_max_videopreview":null,"robots_max_imagepreview":"large","priority":null,"frequency":null,"local_seo":null,"seo_analyzer_scan_date":null,"breadcrumb_settings":null,"limit_modified_date":false,"reviewed_by":null,"ai":null,"created":"2021-02-28 12:15:36","updated":"2022-09-27 16:41:20","focus_keyword":null,"additional_keywords":null,"truseo_locale":null},"gt_translate_keys":[{"key":"link","format":"url"}],"_links":{"self":[{"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/posts\/92075","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/comments?post=92075"}],"version-history":[{"count":0,"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/posts\/92075\/revisions"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/media\/92076"}],"wp:attachment":[{"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/media?parent=92075"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/categories?post=92075"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/tags?post=92075"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}