{"id":92075,"date":"2020-08-22T19:42:03","date_gmt":"2020-08-22T17:42:03","guid":{"rendered":"https:\/\/prohoster.info\/blog\/administrirovanie\/elk-siem-open-distro-vizualizacziya-informaczionnyh-panelej-elk-i-siem-v-elk"},"modified":"2020-08-22T19:42:03","modified_gmt":"2020-08-22T17:42:03","slug":"elk-siem-open-distro-vizualizacziya-informaczionnyh-panelej-elk-i-siem-v-elk","status":"publish","type":"post","link":"https:\/\/prohoster.info\/hr\/blog\/administrirovanie\/elk-siem-open-distro-vizualizacziya-informaczionnyh-panelej-elk-i-siem-v-elk","title":{"rendered":"ELK SIEM Open Distro: Vizualizacija informativnih plo\u010da ELK i SIEM u ELK","gt_translate_keys":[{"key":"rendered","format":"text"}]},"content":{"rendered":"<p>U ovom postu bit \u0107e opisano postavljanje vizualizacije informacijskih panela ELK i SIEM u ELK<br \/>\n\u010clanak je podijeljen u sljede\u0107e odjeljke:<\/p>\n<p><\/p>\n<p>1- Pregled ELK SIEM<br \/>\n2- Zadani nadzorni paneli<br \/>\n3- Izrada va\u0161ih prvih nadzornih panela<\/p>\n<p><noindex><a rel=\"nofollow\" name=\"habracut\"><\/a><\/noindex><\/p>\n<p>Sadr\u017eaj svih postova.<\/p>\n<p><\/p>\n<ul>\n<li><noindex><a rel=\"nofollow\" href=\"https:\/\/habr.com\/ru\/post\/515576\/\">Uvod. Implementacija infrastrukture i tehnologija za SOC kao uslugu (SOCasS)<\/a><\/noindex><\/li>\n<li><noindex><a rel=\"nofollow\" href=\"https:\/\/habr.com\/ru\/post\/515722\/\">ELK stack \u2014 instalacija i konfiguracija<\/a><\/noindex><\/li>\n<li><noindex><a rel=\"nofollow\" href=\"https:\/\/habr.com\/ru\/post\/515920\/\">\u0160etnja open Distro<\/a><\/noindex><\/li>\n<li><noindex><a rel=\"nofollow\" href=\"https:\/\/habr.com\/ru\/post\/516050\/\">Vizualizacija nadzornih panela i ELK SIEM<\/a><\/noindex><\/li>\n<li>Integracija s WAZUH<\/li>\n<li>Obavijesti (Alerting)<\/li>\n<li>Izvje\u0161tavanje<\/li>\n<li>Upravljanje slu\u010dajevima<\/li>\n<\/ul>\n<p><\/p>\n<h3 id=\"1-obzor-elk-siem\">1-Pregled ELK SIEM<\/h3>\n<p><\/p>\n<p>ELK SIEM je nedavno dodat u ELK stack u verziji 7.2 od 25. lipnja 2019. godine.<\/p>\n<p><\/p>\n<p>Ovo je SIEM rje\u0161enje koje je izradila elastic.co kako bi \u017eivot analiti\u010dara sigurnosti bio puno jednostavniji i manje zamoran.<\/p>\n<p><\/p>\n<p>U na\u0161oj verziji rada odlu\u010dili smo izraditi vlastiti SIEM i odabrati vlastitu upravlja\u010dku plo\u010du.<\/p>\n<p><\/p>\n<p>No, smatramo va\u017enim prvo istra\u017eiti ELK SIEM.<\/p>\n<p><\/p>\n<h4 id=\"11--razdel-host-events\">1.1- Odjeljak doga\u0111aja s hosta<\/h4>\n<p><\/p>\n<p>Prvo \u0107emo pregledati odjeljak hosta. Odjeljak hosta omogu\u0107it \u0107e vam da vidite doga\u0111aje koji se generiraju na samoj krajnjoj to\u010dki.<\/p>\n<p><\/p>\n<p><img decoding=\"async\" alt=\"ELK SIEM Open Distro: Vizualizacija informativnih plo\u010da ELK i SIEM u ELK\" src=\"\/wp-content\/uploads\/2020\/08\/54ebe976e6479930ca8d20cfacdc0d8d.png\" style=\"display:block;margin: 0 auto;\" \/><\/p>\n<p><\/p>\n<p><img decoding=\"async\" alt=\"ELK SIEM Open Distro: Vizualizacija informativnih plo\u010da ELK i SIEM u ELK\" src=\"\/wp-content\/uploads\/2020\/08\/e0862fafaa4ad1ba34714339a33c698f.png\" style=\"display:block;margin: 0 auto;\" \/><\/p>\n<p><\/p>\n<p>Nakon \u0161to pritisnete pregled hostova, trebali biste dobiti ne\u0161to poput ovoga. Kao \u0161to vidite, na ovu ra\u010dunalnu jedinicu spojena su tri hosta:<\/p>\n<p><\/p>\n<p>1 Windows 10.<\/p>\n<p><\/p>\n<p>2 Server Ubuntu 18.04.<\/p>\n<p><\/p>\n<p>Imamo nekoliko prikazanih vizualizacija, svaka od njih prikazuje razli\u010dite vrste doga\u0111aja.<\/p>\n<p><\/p>\n<p>Na primjer, ona koja je u sredini prikazuje podatke o prijavama na sve tri ma\u0161ine.<\/p>\n<p><\/p>\n<p>Ova koli\u010dina podataka koju ovdje vidite prikupljena je tijekom pet dana. To obja\u0161njava veliki broj neuspje\u0161nih i uspje\u0161nih prijava u sustav. Vjerojatno \u0107ete imati mali broj zapisa, stoga se ne brinite<\/p>\n<p><\/p>\n<h4 id=\"12--razdel-setevyh-sobytiy\">1.2- Odjeljak mre\u017enih doga\u0111aja<\/h4>\n<p><\/p>\n<p>Prelaze\u0107i na odjeljak mre\u017ee, trebali biste dobiti ne\u0161to poput ovoga. Ovaj odjeljak omogu\u0107it \u0107e vam da pa\u017eljivo pratite sve \u0161to se doga\u0111a u va\u0161oj mre\u017ei, od HTTP\/TLS prometa do DNS prometa i vanjskih upozorenja o doga\u0111ajima.<\/p>\n<p><\/p>\n<p><img decoding=\"async\" alt=\"ELK SIEM Open Distro: Vizualizacija informativnih plo\u010da ELK i SIEM u ELK\" src=\"\/wp-content\/uploads\/2020\/08\/3ebae3d5e85dd84556eb26901c2fd519.png\" style=\"display:block;margin: 0 auto;\" \/><\/p>\n<p><\/p>\n<p><img decoding=\"async\" alt=\"ELK SIEM Open Distro: Vizualizacija informativnih plo\u010da ELK i SIEM u ELK\" src=\"\/wp-content\/uploads\/2020\/08\/344db7fac06acabaa011657debb52993.png\" style=\"display:block;margin: 0 auto;\" \/><\/p>\n<p><\/p>\n<h3 id=\"2--dashbordy-po-umolchaniyu\">2- Zadani nadzorni paneli<\/h3>\n<p><\/p>\n<p>Kako bi olak\u0161ali \u017eivot korisnicima, programeri elastic.co stvorili su zadani nadzorni panel, slu\u017ebeno podr\u017ean od ELK-a. Na\u0161i bitovi nisu bili izuzetak iz ovog pravila. Ovdje \u0107u uzeti kao primjer zadani nadzorni panel Packetbeat.<\/p>\n<p><\/p>\n<p>Ako ste ispravno izvr\u0161ili drugi korak \u010dlanka. Trebala bi vam biti postavljena nadzorna plo\u010da koja \u010deka na vas. Pa, krenimo.<\/p>\n<p><\/p>\n<p>Na lijevoj kartici Kibana odaberite simbol nadzorne plo\u010de. To je tre\u0107e, ako se broji od vrha.<\/p>\n<p><\/p>\n<p>Unesite naziv udjela u pretra\u017eiva\u010du<\/p>\n<p><\/p>\n<p>Ako u bitu ima vi\u0161e modula. Bit \u0107e stvoren upravlja\u010dka plo\u010da za svaki od njih. No, samo onaj s aktivnim modulom \u0107e prikazati neprazne podatke.<\/p>\n<p><\/p>\n<p>Odaberite onaj koji ima naziv va\u0161eg modula.<\/p>\n<p><\/p>\n<p>To je osnovna predlo\u017eak <strong>PacketBeat<\/strong>.<\/p>\n<p><\/p>\n<p><img decoding=\"async\" alt=\"ELK SIEM Open Distro: Vizualizacija informativnih plo\u010da ELK i SIEM u ELK\" src=\"\/wp-content\/uploads\/2020\/08\/f895c527f746c6df4c7e4e43c4eee802.png\" style=\"display:block;margin: 0 auto;\" \/><\/p>\n<p><\/p>\n<p>Ovo je upravlja\u010dka plo\u010da mre\u017enih tokova. Obavijestit \u0107e nas o dolaznom i odlaznom paketu, izvorima i odredi\u0161tima IP adresa, te dati mnogo korisnih informacija analiti\u010daru sigurnosnog centra.<\/p>\n<p><\/p>\n<p><img decoding=\"async\" alt=\"ELK SIEM Open Distro: Vizualizacija informativnih plo\u010da ELK i SIEM u ELK\" src=\"\/wp-content\/uploads\/2020\/08\/1d319ebf0865ea4ad18c9f1a10d6182d.png\" style=\"display:block;margin: 0 auto;\" \/><\/p>\n<p><\/p>\n<p><img decoding=\"async\" alt=\"ELK SIEM Open Distro: Vizualizacija informativnih plo\u010da ELK i SIEM u ELK\" src=\"\/wp-content\/uploads\/2020\/08\/fb4f7078d667bc3c402198c2c58c293d.png\" style=\"display:block;margin: 0 auto;\" \/><\/p>\n<p><\/p>\n<h3 id=\"3---sozdanie-vashih-pervyh-dashbordov\">3 \u2014 Kreiranje va\u0161ih prvih nadzornih plo\u010da<\/h3>\n<p><\/p>\n<h4 id=\"31--osnovnye-ponyatiya\">3\u20131\u2013 Osnovni pojmovi<\/h4>\n<p><\/p>\n<p><strong>A- Tipovi nadzornih plo\u010da:<\/strong><\/p>\n<p><\/p>\n<p>To su razli\u010dite vrste vizualizacija koje mo\u017eete koristiti za vizualizaciju va\u0161ih podataka.<\/p>\n<p><\/p>\n<p>Na primjer, imamo:<\/p>\n<p><\/p>\n<ul>\n<li>Histogram<\/li>\n<li>Karta<\/li>\n<li>Markdown widget<\/li>\n<li>Kru\u017eni dijagram<\/li>\n<\/ul>\n<p><\/p>\n<p><img decoding=\"async\" alt=\"ELK SIEM Open Distro: Vizualizacija informativnih plo\u010da ELK i SIEM u ELK\" src=\"\/wp-content\/uploads\/2020\/08\/63a8cbb26fe1caa4c224fffca02a58ad.png\" style=\"display:block;margin: 0 auto;\" \/><\/p>\n<p><\/p>\n<p><strong>B- KQL (jezik upita Kibana):<\/strong><\/p>\n<p><\/p>\n<p>To je jezik koji se koristi u Kibani za jednostavno pretra\u017eivanje podataka. Omogu\u0107ava vam da provjerite postoje li odre\u0111eni podaci i mnoge druge korisne funkcije. Da biste saznali vi\u0161e, mo\u017eete prou\u010diti informacije na ovoj poveznici<\/p>\n<p><\/p>\n<p><noindex><a rel=\"nofollow\" href=\"https:\/\/www.elastic.co\/guide\/en\/kibana\/current\/kuery-query.html\">https:\/\/www.elastic.co\/guide\/en\/kibana\/current\/kuery-query.html<\/a><\/noindex><\/p>\n<p><\/p>\n<p>Ovo je primjer upita za pretra\u017eivanje hosta s operativnim sustavom Windows 10 pro.<\/p>\n<p><\/p>\n<p><img decoding=\"async\" alt=\"ELK SIEM Open Distro: Vizualizacija informativnih plo\u010da ELK i SIEM u ELK\" src=\"\/wp-content\/uploads\/2020\/08\/2785f9afe1dfe463ad6b56febcfa04b8.png\" style=\"display:block;margin: 0 auto;\" \/><\/p>\n<p><\/p>\n<p><strong>C- Filtri:<\/strong><\/p>\n<p><\/p>\n<p>Ova funkcija omogu\u0107it \u0107e vam filtriranje odre\u0111enih parametara, kao \u0161to su ime hosta, kod ili identifikator doga\u0111aja itd. Filtri \u0107e zna\u010dajno pobolj\u0161ati fazu istrage u pogledu vremena i truda ulo\u017eenih u pretra\u017eivanje dokaza.<\/p>\n<p><\/p>\n<p><strong>D- Prva vizualizacija:<\/strong><\/p>\n<p><\/p>\n<p>Kreirat \u0107emo vizualizaciju za MITER ATT &amp; CK.<\/p>\n<p><\/p>\n<p>Prvo trebamo oti\u0107i u <strong>Dashboard \u2192 Kreiraj novu nadzornu plo\u010du \u2192 kreiraj novo \u2192 Kru\u017ena nadzorna plo\u010da<\/strong><\/p>\n<p><\/p>\n<p>Postavite tip za indeksni obrazac, zatim dodirnite naziv svog bita.<\/p>\n<p><\/p>\n<p>Pritisnite Enter. U ovom trenutku trebali biste vidjeti zeleni kola\u010di\u0107.<\/p>\n<p><\/p>\n<p>Na kartici Buckets lijevo \u0107ete prona\u0107i:<\/p>\n<p><\/p>\n<p><img decoding=\"async\" alt=\"ELK SIEM Open Distro: Vizualizacija informativnih plo\u010da ELK i SIEM u ELK\" src=\"\/wp-content\/uploads\/2020\/08\/432dd674f142ee33b4e248621638b9e8.png\" style=\"display:block;margin: 0 auto;\" \/><\/p>\n<p><\/p>\n<p> \u2014 Split slices podijelit \u0107e kola\u010di\u0107 na razli\u010dite dijelove ovisno o raspr\u0161enju podataka.<\/p>\n<p><\/p>\n<p> \u2014 Split Chart stvorit \u0107e jo\u0161 jedan kola\u010di\u0107 pored ovoga. <\/p>\n<p><\/p>\n<p>Koristit \u0107emo podijeljene kri\u0161ke.<\/p>\n<p><\/p>\n<p>Vizualizirat \u0107emo na\u0161e podatke u odnosu na termin koji smo odabrali. U ovom slu\u010daju pojam \u0107e se odnositi na MITER ATT &amp; CK.<\/p>\n<p><\/p>\n<p>U Winlogbeat polje koje \u0107e nam pru\u017eiti ove informacije zove se:<\/p>\n<p><\/p>\n<pre><code class=\"plaintext\">winlog.event_data.RuleName<\/code><\/pre>\n<p><\/p>\n<p><strong>Postavit \u0107emo metrik count kako bismo rasporedili doga\u0111aje prema broju njihovih pojavnosti.<\/strong><\/p>\n<p><\/p>\n<p>Uklju\u010dite funkciju \"Grupiraj druge vrijednosti u odvojenom segmentu\".<\/p>\n<p><\/p>\n<p>Ovo \u0107e biti korisno ako termini koje ste odabrali imaju mnogo razli\u010ditih zna\u010denja koja proizlaze iz ritma. To poma\u017ee vizualizirati ostale podatke kao cjelinu. To \u0107e vam dati predstavu o postotku ostalih doga\u0111aja.<\/p>\n<p><\/p>\n<p>Sada kada smo zavr\u0161ili s postavkama kartice podataka, pre\u0111imo na karticu opcija.<\/p>\n<p><\/p>\n<p>Treba da uradite slede\u0107e:<\/p>\n<p><\/p>\n<p>** Uklonite donut oblik kako bi se na vizualizaciji pojavio pun krug.<\/p>\n<p><\/p>\n<p>** Odaberite poziciju legende koja vam se svi\u0111a. U ovom slu\u010daju, prika\u017eemo ih s desne strane.<\/p>\n<p><\/p>\n<p>** Postavite vrijednosti prikazivanja da se prikazuju pored svog segmenta radi lak\u0161eg \u010ditanja, a ostale ostavite prema zadanim postavkama.<\/p>\n<p><\/p>\n<p><img decoding=\"async\" alt=\"ELK SIEM Open Distro: Vizualizacija informativnih plo\u010da ELK i SIEM u ELK\" src=\"\/wp-content\/uploads\/2020\/08\/9b2e230247a5277c198f196e96e5f6da.png\" style=\"display:block;margin: 0 auto;\" \/><\/p>\n<p><\/p>\n<p><strong>Skra\u0107ivanje odre\u0111uje koliko \u017eelite prikazati od imena doga\u0111aja.<\/strong><\/p>\n<p><\/p>\n<p>Postavite vrijeme od kojega bi trebala po\u010deti vizualizacija, a zatim kliknite plavi kvadrat.<\/p>\n<p><\/p>\n<p>Trebalo bi da dobijete ne\u0161to sli\u010dno:<\/p>\n<p><\/p>\n<p><img decoding=\"async\" alt=\"ELK SIEM Open Distro: Vizualizacija informativnih plo\u010da ELK i SIEM u ELK\" src=\"\/wp-content\/uploads\/2020\/08\/b89f5bf6aee38ff9019540b5f72b6c4c.png\" style=\"display:block;margin: 0 auto;\" \/><\/p>\n<p><\/p>\n<p>Mo\u017eete tako\u0111er dodati filtriranje svojoj vizualizaciji kako biste filtrirali odre\u0111eni host koji \u017eelite provjeriti, ili bilo koje parametre za koje mislite da su korisni za va\u0161u svrhu. Vizualizacija \u0107e prikazivati samo podatke koji odgovaraju pravilu postavljenom u filtar. U ovom slu\u010daju, prikazat \u0107emo podatke MITER ATT &amp; CK, dolaze\u0107i samo s hosta pod nazivom win10.<\/p>\n<p><\/p>\n<p><img decoding=\"async\" alt=\"ELK SIEM Open Distro: Vizualizacija informativnih plo\u010da ELK i SIEM u ELK\" src=\"\/wp-content\/uploads\/2020\/08\/aa6b4716d7e2cd27c9cc6b1a4acb25ae.png\" style=\"display:block;margin: 0 auto;\" \/><\/p>\n<p><\/p>\n<h4 id=\"32--sozdanie-vashey-pervoy-informacionnoy-paneli\">3\u20132- Izrada va\u0161e prve kontrolne plo\u010de:<\/h4>\n<p><\/p>\n<p>Kontrolna plo\u010da je set vi\u0161e vizualizacija. Va\u0161e kontrolne plo\u010de trebaju biti jasne, razumljive i sadr\u017eavati korisne i odre\u0111ene podatke. Evo primjera kontrolnih plo\u010da koje smo stvorili od nule za winlogbeat.<\/p>\n<p><\/p>\n<p><img decoding=\"async\" alt=\"ELK SIEM Open Distro: Vizualizacija informativnih plo\u010da ELK i SIEM u ELK\" src=\"\/wp-content\/uploads\/2020\/08\/d2da07c7fce7a96fa754c709bdedb8a0.png\" style=\"display:block;margin: 0 auto;\" \/><\/p>\n<p><\/p>\n<p>Hvala vam na vremenu. Nadam se da vam je ovaj \u010dlanak bio od pomo\u0107i. Ako \u017eelite vi\u0161e informacija na ovu temu, preporu\u010dujemo vam da posjetite <noindex><a rel=\"nofollow\" href=\"https:\/\/www.elastic.co\/guide\/en\/kibana\/current\/tutorial-visualizing.html\">slu\u017ebena stranica<\/a><\/noindex>.<\/p>\n<p><\/p>\n<p>Telegram chat za Elasticsearch: <noindex><a rel=\"nofollow\" href=\"https:\/\/t.me\/elasticsearch_ru\">https:\/\/t.me\/elasticsearch_ru<\/a><\/noindex><\/p>\n<p>Izvor: <a content=\"nofollow\" rel=\"nofollow\" href=\"https:\/\/habr.com\/ru\/post\/516050\/\">habr.com<\/a> <\/p>","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"excerpt":{"rendered":"<p>\u0412 \u044d\u0442\u043e\u043c \u043f\u043e\u0441\u0442\u0435 \u0431\u0443\u0434\u0435\u0442 \u043e\u043f\u0438\u0441\u0430\u043d\u0430 \u043d\u0430\u0441\u0442\u0440\u043e\u0439\u043a\u0430 \u0432\u0438\u0437\u0443\u0430\u043b\u0438\u0437\u0430\u0446\u0438\u0438 \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u043e\u043d\u043d\u044b\u0445 \u043f\u0430\u043d\u0435\u043b\u0435\u0439 ELK \u0438 SIEM \u0432 ELK \u0421\u0442\u0430\u0442\u044c\u044f \u0440\u0430\u0437\u0434\u0435\u043b\u0435\u043d\u0430 \u043d\u0430 \u0441\u043b\u0435\u0434\u0443\u044e\u0449\u0438\u0435 \u0440\u0430\u0437\u0434\u0435\u043b\u044b: 1- \u041e\u0431\u0437\u043e\u0440 ELK SIEM 2- \u0414\u0430\u0448\u0431\u043e\u0440\u0434\u044b \u043f\u043e \u0443\u043c\u043e\u043b\u0447\u0430\u043d\u0438\u044e 3- \u0421\u043e\u0437\u0434\u0430\u043d\u0438\u0435 \u0432\u0430\u0448\u0438\u0445 \u043f\u0435\u0440\u0432\u044b\u0445 \u0434\u0430\u0448\u0431\u043e\u0440\u0434\u043e\u0432 \u041e\u0433\u043b\u0430\u0432\u043b\u0435\u043d\u0438\u0435 \u0432\u0441\u0435\u0445 \u043f\u043e\u0441\u0442\u043e\u0432. \u0412\u0432\u0435\u0434\u0435\u043d\u0438\u0435. \u0420\u0430\u0437\u0432\u0435\u0440\u0442\u044b\u0432\u0430\u043d\u0438\u0435 \u0438\u043d\u0444\u0440\u0430\u0441\u0442\u0440\u0443\u043a\u0442\u0443\u0440\u044b \u0438 \u0442\u0435\u0445\u043d\u043e\u043b\u043e\u0433\u0438\u0439 \u0434\u043b\u044f SOC \u043a\u0430\u043a Service (SOCasS) ELK stack \u2014 \u0443\u0441\u0442\u0430\u043d\u043e\u0432\u043a\u0430 \u0438 \u043d\u0430\u0441\u0442\u0440\u043e\u0439\u043a\u0430 \u041f\u0440\u043e\u0433\u0443\u043b\u043a\u0430 \u043f\u043e open Distro [&hellip;]<\/p>\n","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"author":1,"featured_media":92076,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[688],"tags":[],"class_list":["post-92075","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-administrirovanie"],"aioseo_notices":[],"aioseo_head":"\n\t\t<!-- All in One SEO 5.0.4 - aioseo.com -->\n\t<meta name=\"description\" content=\"\u0412 \u044d\u0442\u043e\u043c \u043f\u043e\u0441\u0442\u0435 \u0431\u0443\u0434\u0435\u0442 \u043e\u043f\u0438\u0441\u0430\u043d\u0430 \u043d\u0430\u0441\u0442\u0440\u043e\u0439\u043a\u0430 \u0432\u0438\u0437\u0443\u0430\u043b\u0438\u0437\u0430\u0446\u0438\u0438 \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u043e\u043d\u043d\u044b\u0445 \u043f\u0430\u043d\u0435\u043b\u0435\u0439 ELK \u0438 SIEM \u0432 ELK \u0421\u0442\u0430\u0442\u044c\u044f \u0440\u0430\u0437\u0434\u0435\u043b\u0435\u043d\u0430 \u043d\u0430 \u0441\u043b\u0435\u0434\u0443\u044e\u0449\u0438\u0435 \u0440\u0430\u0437\u0434\u0435\u043b\u044b: 1- \u041e\u0431\u0437\u043e\u0440 ELK SIEM 2- \u0414\u0430\u0448\u0431\u043e\u0440\u0434\u044b \u043f\u043e \u0443\u043c\u043e\u043b\u0447\u0430\u043d\u0438\u044e 3- \u0421\u043e\u0437\u0434\u0430\u043d\u0438\u0435 \u0432\u0430\u0448\u0438\u0445.\" \/>\n\t<meta name=\"robots\" content=\"max-image-preview:large\" \/>\n\t<meta name=\"author\" content=\"Yuri Gagarin\"\/>\n\t<link rel=\"canonical\" href=\"https:\/\/prohoster.info\/hr\/blog\/administrirovanie\/elk-siem-open-distro-vizualizacziya-informaczionnyh-panelej-elk-i-siem-v-elk\" \/>\n\t\t<meta name=\"generator\" content=\"All in One SEO (AIOSEO) 5.0.4\" \/>\n\t\t<meta property=\"og:locale\" content=\"hr_HR\" \/>\n\t\t<meta property=\"og:site_name\" content=\"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b\" \/>\n\t\t<meta property=\"og:type\" content=\"article\" \/>\n\t\t<meta property=\"og:title\" content=\"\ud83e\udd47ELK SIEM Open Distro: \u0412\u0438\u0437\u0443\u0430\u043b\u0438\u0437\u0430\u0446\u0438\u044f \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u043e\u043d\u043d\u044b\u0445 \u043f\u0430\u043d\u0435\u043b\u0435\u0439 ELK \u0438 SIEM \u0432 ELK | ProHoster\" \/>\n\t\t<meta property=\"og:description\" content=\"\u0412 \u044d\u0442\u043e\u043c \u043f\u043e\u0441\u0442\u0435 \u0431\u0443\u0434\u0435\u0442 \u043e\u043f\u0438\u0441\u0430\u043d\u0430 \u043d\u0430\u0441\u0442\u0440\u043e\u0439\u043a\u0430 \u0432\u0438\u0437\u0443\u0430\u043b\u0438\u0437\u0430\u0446\u0438\u0438 \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u043e\u043d\u043d\u044b\u0445 \u043f\u0430\u043d\u0435\u043b\u0435\u0439 ELK \u0438 SIEM \u0432 ELK \u0421\u0442\u0430\u0442\u044c\u044f \u0440\u0430\u0437\u0434\u0435\u043b\u0435\u043d\u0430 \u043d\u0430 \u0441\u043b\u0435\u0434\u0443\u044e\u0449\u0438\u0435 \u0440\u0430\u0437\u0434\u0435\u043b\u044b: 1- \u041e\u0431\u0437\u043e\u0440 ELK SIEM 2- \u0414\u0430\u0448\u0431\u043e\u0440\u0434\u044b \u043f\u043e \u0443\u043c\u043e\u043b\u0447\u0430\u043d\u0438\u044e 3- \u0421\u043e\u0437\u0434\u0430\u043d\u0438\u0435 \u0432\u0430\u0448\u0438\u0445.\" \/>\n\t\t<meta property=\"og:url\" content=\"https:\/\/prohoster.info\/hr\/blog\/administrirovanie\/elk-siem-open-distro-vizualizacziya-informaczionnyh-panelej-elk-i-siem-v-elk\" \/>\n\t\t<meta property=\"og:image\" content=\"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg\" \/>\n\t\t<meta property=\"og:image:secure_url\" content=\"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg\" \/>\n\t\t<meta property=\"og:image:width\" content=\"350\" \/>\n\t\t<meta property=\"og:image:height\" content=\"350\" \/>\n\t\t<meta property=\"article:published_time\" content=\"2020-08-22T17:42:03+00:00\" \/>\n\t\t<meta property=\"article:modified_time\" content=\"2020-08-22T17:42:03+00:00\" \/>\n\t\t<meta property=\"article:publisher\" content=\"https:\/\/www.facebook.com\/prohoster\" \/>\n\t\t<meta property=\"article:author\" content=\"https:\/\/www.facebook.com\/prohoster\" \/>\n\t\t<!-- All in One SEO -->\n\n","aioseo_head_json":{"title":"\ud83e\udd47ELK SIEM Open Distro: Vizualizacija kontrolnih plo\u010da ELK i SIEM u ELK | ProHoster","description":"U ovom postu bit \u0107e opisana postavka vizualizacije kontrolnih plo\u010da ELK i SIEM u ELK. \u010clanak je podijeljen na sljede\u0107e odjeljke: 1- Pregled ELK SIEM 2- Zadane kontrolne plo\u010de 3- Izrada va\u0161ih.","canonical_url":"https:\/\/prohoster.info\/hr\/blog\/administrirovanie\/elk-siem-open-distro-vizualizacziya-informaczionnyh-panelej-elk-i-siem-v-elk","robots":"max-image-preview:large","keywords":"","webmasterTools":{"miscellaneous":""},"schema":null,"og:locale":"hr_HR","og:site_name":"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b","og:type":"article","og:title":"\ud83e\udd47ELK SIEM Open Distro: \u0412\u0438\u0437\u0443\u0430\u043b\u0438\u0437\u0430\u0446\u0438\u044f \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u043e\u043d\u043d\u044b\u0445 \u043f\u0430\u043d\u0435\u043b\u0435\u0439 ELK \u0438 SIEM \u0432 ELK | ProHoster","og:description":"\u0412 \u044d\u0442\u043e\u043c \u043f\u043e\u0441\u0442\u0435 \u0431\u0443\u0434\u0435\u0442 \u043e\u043f\u0438\u0441\u0430\u043d\u0430 \u043d\u0430\u0441\u0442\u0440\u043e\u0439\u043a\u0430 \u0432\u0438\u0437\u0443\u0430\u043b\u0438\u0437\u0430\u0446\u0438\u0438 \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u043e\u043d\u043d\u044b\u0445 \u043f\u0430\u043d\u0435\u043b\u0435\u0439 ELK \u0438 SIEM \u0432 ELK \u0421\u0442\u0430\u0442\u044c\u044f \u0440\u0430\u0437\u0434\u0435\u043b\u0435\u043d\u0430 \u043d\u0430 \u0441\u043b\u0435\u0434\u0443\u044e\u0449\u0438\u0435 \u0440\u0430\u0437\u0434\u0435\u043b\u044b: 1- \u041e\u0431\u0437\u043e\u0440 ELK SIEM 2- \u0414\u0430\u0448\u0431\u043e\u0440\u0434\u044b \u043f\u043e \u0443\u043c\u043e\u043b\u0447\u0430\u043d\u0438\u044e 3- \u0421\u043e\u0437\u0434\u0430\u043d\u0438\u0435 \u0432\u0430\u0448\u0438\u0445.","og:url":"https:\/\/prohoster.info\/hr\/blog\/administrirovanie\/elk-siem-open-distro-vizualizacziya-informaczionnyh-panelej-elk-i-siem-v-elk","og:image":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:secure_url":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:width":350,"og:image:height":350,"article:published_time":"2020-08-22T17:42:03+00:00","article:modified_time":"2020-08-22T17:42:03+00:00","article:publisher":"https:\/\/www.facebook.com\/prohoster","article:author":"https:\/\/www.facebook.com\/prohoster"},"aioseo_meta_data":{"post_id":"92075","title":null,"description":null,"keywords":null,"keyphrases":null,"primary_term":null,"canonical_url":null,"og_title":null,"og_description":null,"og_object_type":"default","og_image_type":"default","og_image_url":null,"og_image_width":null,"og_image_height":null,"og_image_custom_url":null,"og_image_custom_fields":null,"og_video":null,"og_custom_url":null,"og_article_section":null,"og_article_tags":null,"twitter_use_og":false,"twitter_card":"default","twitter_image_type":"default","twitter_image_url":null,"twitter_image_custom_url":null,"twitter_image_custom_fields":null,"twitter_title":null,"twitter_description":null,"schema":{"blockGraphs":[],"customGraphs":[],"default":{"data":{"Article":[],"Course":[],"Dataset":[],"FAQPage":[],"Movie":[],"Person":[],"Product":[],"ProductReview":[],"Car":[],"Recipe":[],"Service":[],"SoftwareApplication":[],"WebPage":[]},"graphName":"","isEnabled":true},"graphs":[]},"schema_type":null,"schema_type_options":null,"pillar_content":false,"robots_default":true,"robots_noindex":false,"robots_noarchive":false,"robots_nosnippet":false,"robots_nofollow":false,"robots_noimageindex":false,"robots_noodp":false,"robots_notranslate":false,"robots_max_snippet":null,"robots_max_videopreview":null,"robots_max_imagepreview":"large","priority":null,"frequency":null,"local_seo":null,"seo_analyzer_scan_date":null,"breadcrumb_settings":null,"limit_modified_date":false,"reviewed_by":null,"ai":null,"created":"2021-02-28 12:15:36","updated":"2022-09-27 16:41:20","focus_keyword":null,"additional_keywords":null,"truseo_locale":null},"gt_translate_keys":[{"key":"link","format":"url"}],"_links":{"self":[{"href":"https:\/\/prohoster.info\/hr\/wp-json\/wp\/v2\/posts\/92075","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/prohoster.info\/hr\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/prohoster.info\/hr\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/prohoster.info\/hr\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/prohoster.info\/hr\/wp-json\/wp\/v2\/comments?post=92075"}],"version-history":[{"count":0,"href":"https:\/\/prohoster.info\/hr\/wp-json\/wp\/v2\/posts\/92075\/revisions"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/prohoster.info\/hr\/wp-json\/wp\/v2\/media\/92076"}],"wp:attachment":[{"href":"https:\/\/prohoster.info\/hr\/wp-json\/wp\/v2\/media?parent=92075"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/prohoster.info\/hr\/wp-json\/wp\/v2\/categories?post=92075"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/prohoster.info\/hr\/wp-json\/wp\/v2\/tags?post=92075"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}