{"id":92075,"date":"2020-08-22T19:42:03","date_gmt":"2020-08-22T17:42:03","guid":{"rendered":"https:\/\/prohoster.info\/blog\/administrirovanie\/elk-siem-open-distro-vizualizacziya-informaczionnyh-panelej-elk-i-siem-v-elk"},"modified":"2020-08-22T19:42:03","modified_gmt":"2020-08-22T17:42:03","slug":"elk-siem-open-distro-vizualizacziya-informaczionnyh-panelej-elk-i-siem-v-elk","status":"publish","type":"post","link":"https:\/\/prohoster.info\/ro\/blog\/administrirovanie\/elk-siem-open-distro-vizualizacziya-informaczionnyh-panelej-elk-i-siem-v-elk","title":{"rendered":"ELK SIEM Open Distro: Vizualizarea panourilor de informa\u021bii ELK \u0219i SIEM \u00een ELK","gt_translate_keys":[{"key":"rendered","format":"text"}]},"content":{"rendered":"<p>\u00cen acest articol va fi descris\u0103 configurarea vizualiz\u0103rii panourilor de informa\u021bii ELK \u0219i SIEM \u00een ELK<br \/>\nArticolul este structurat \u00een urm\u0103toarele sec\u021biuni:<\/p>\n<p><\/p>\n<p>1- Prezentarea ELK SIEM<br \/>\n2- Panouri implicite<br \/>\n3- Crearea primelor tale panouri<\/p>\n<p><noindex><a rel=\"nofollow\" name=\"habracut\"><\/a><\/noindex><\/p>\n<p>Cuprinsul tuturor articolelor.<\/p>\n<p><\/p>\n<ul>\n<li><noindex><a rel=\"nofollow\" href=\"https:\/\/habr.com\/ru\/post\/515576\/\">Introducere. Implementarea infrastructurii \u0219i tehnologiilor pentru SOC ca Serviciu (SOCasS)<\/a><\/noindex><\/li>\n<li><noindex><a rel=\"nofollow\" href=\"https:\/\/habr.com\/ru\/post\/515722\/\">Stiva ELK \u2014 instalare \u0219i configurare<\/a><\/noindex><\/li>\n<li><noindex><a rel=\"nofollow\" href=\"https:\/\/habr.com\/ru\/post\/515920\/\">Pery la open Distro<\/a><\/noindex><\/li>\n<li><noindex><a rel=\"nofollow\" href=\"https:\/\/habr.com\/ru\/post\/516050\/\">Vizualizarea Panourilor \u0219i ELK SIEM<\/a><\/noindex><\/li>\n<li>Integrarea cu WAZUH<\/li>\n<li>Alerta<\/li>\n<li>Raportarea<\/li>\n<li>Gestionarea cazurilor<\/li>\n<\/ul>\n<p><\/p>\n<h3 id=\"1-obzor-elk-siem\">1-Prezentarea ELK SIEM<\/h3>\n<p><\/p>\n<p>ELK SIEM a fost ad\u0103ugat recent \u00een stiva elk \u00een versiunea 7.2 din 25 iunie 2019.<\/p>\n<p><\/p>\n<p>Aceast\u0103 solu\u021bie SIEM, creat\u0103 de elastic.co, urm\u0103re\u0219te s\u0103 fac\u0103 via\u021ba analistului de securitate mult mai u\u0219oar\u0103 \u0219i mai pu\u021bin obositoare.<\/p>\n<p><\/p>\n<p>\u00cen versiunea noastr\u0103, am decis s\u0103 construim propriul SIEM \u0219i s\u0103 alegem propriul tablou de bord.<\/p>\n<p><\/p>\n<p>Dar consider\u0103m c\u0103 este important s\u0103 explor\u0103m mai \u00eent\u00e2i ELK SIEM.<\/p>\n<p><\/p>\n<h4 id=\"11--razdel-host-events\">1.1- Sec\u021biunea Evenimente de gazd\u0103<\/h4>\n<p><\/p>\n<p>Prima dat\u0103 vom analiza sec\u021biunea gazd\u0103. Aceast\u0103 sec\u021biune \u00ee\u021bi va permite s\u0103 vezi evenimentele generate pe cea mai final\u0103 punct.<\/p>\n<p><\/p>\n<p><img decoding=\"async\" alt=\"ELK SIEM Open Distro: Vizualizarea panourilor de informa\u021bii ELK \u0219i SIEM \u00een ELK\" src=\"\/wp-content\/uploads\/2020\/08\/54ebe976e6479930ca8d20cfacdc0d8d.png\" style=\"display:block;margin: 0 auto;\" \/><\/p>\n<p><\/p>\n<p><img decoding=\"async\" alt=\"ELK SIEM Open Distro: Vizualizarea panourilor de informa\u021bii ELK \u0219i SIEM \u00een ELK\" src=\"\/wp-content\/uploads\/2020\/08\/e0862fafaa4ad1ba34714339a33c698f.png\" style=\"display:block;margin: 0 auto;\" \/><\/p>\n<p><\/p>\n<p>Dup\u0103 ce faci clic pe vizualizarea gazdelor, ar trebui s\u0103 ob\u021bii ceva de genul acesta. A\u0219a cum po\u021bi vedea, acestui computer i se al\u0103tur\u0103 trei gazde:<\/p>\n<p><\/p>\n<p>1 Windows 10.<\/p>\n<p><\/p>\n<p>2 Server Ubuntu 18.04.<\/p>\n<p><\/p>\n<p>Avem c\u00e2teva vizualiz\u0103ri afi\u0219ate, fiecare dintre ele ar\u0103t\u00e2nd diferite tipuri de evenimente.<\/p>\n<p><\/p>\n<p>De exemplu, cel din mijloc arat\u0103 datele de conectare pe toate cele trei ma\u0219ini.<\/p>\n<p><\/p>\n<p>Volumul de date pe care \u00eel vezi aici a fost colectat \u00een decurs de cinci zile. Acesta explic\u0103 num\u0103rul mare de \u00eencerc\u0103ri nereu\u0219ite \u0219i reu\u0219ite de conectare. Probabil vei avea un num\u0103r redus de jurnaliz\u0103ri, a\u0219a c\u0103 nu-\u021bi face griji.<\/p>\n<p><\/p>\n<h4 id=\"12--razdel-setevyh-sobytiy\">1.2- Sec\u021biunea Evenimente de re\u021bea<\/h4>\n<p><\/p>\n<p>Trec\u00e2nd la sec\u021biunea re\u021bea, ar trebui s\u0103 ob\u021bii ceva de genul acesta. Aceast\u0103 sec\u021biune \u00ee\u021bi va permite s\u0103 monitorizezi atent tot ce se \u00eent\u00e2mpl\u0103 \u00een re\u021beaua ta, de la traficul HTTP \/ TLS p\u00e2n\u0103 la traficul DNS \u0219i alertele externe de evenimente.<\/p>\n<p><\/p>\n<p><img decoding=\"async\" alt=\"ELK SIEM Open Distro: Vizualizarea panourilor de informa\u021bii ELK \u0219i SIEM \u00een ELK\" src=\"\/wp-content\/uploads\/2020\/08\/3ebae3d5e85dd84556eb26901c2fd519.png\" style=\"display:block;margin: 0 auto;\" \/><\/p>\n<p><\/p>\n<p><img decoding=\"async\" alt=\"ELK SIEM Open Distro: Vizualizarea panourilor de informa\u021bii ELK \u0219i SIEM \u00een ELK\" src=\"\/wp-content\/uploads\/2020\/08\/344db7fac06acabaa011657debb52993.png\" style=\"display:block;margin: 0 auto;\" \/><\/p>\n<p><\/p>\n<h3 id=\"2--dashbordy-po-umolchaniyu\">2- Panouri implicite<\/h3>\n<p><\/p>\n<p>Pentru a face via\u021ba utilizatorilor mai u\u0219oar\u0103, dezvoltatorii elastic.co au creat un tablou de bord implicit, sus\u021binut oficial de ELK. Bitele noastre nu au fost o excep\u021bie de la aceast\u0103 regul\u0103. Aici voi lua drept exemplu tabloul de bord Packetbeat implicit.<\/p>\n<p><\/p>\n<p>Dac\u0103 ai realizat corect pasul din articolul doi. Ar trebui s\u0103 ai un tablou de bord configurat care te a\u0219teapt\u0103. A\u0219adar, s\u0103 \u00eencepem.<\/p>\n<p><\/p>\n<p>Pe fila din st\u00e2nga a Kibana, selecta\u021bi simbolul tabloului de bord. Este al treilea, dac\u0103 num\u0103r\u0103m de sus.<\/p>\n<p><\/p>\n<p>Introduce\u021bi numele por\u021biunii \u00een fila de c\u0103utare.<\/p>\n<p><\/p>\n<p>Dac\u0103 \u00een bit exist\u0103 mai multe module, va fi creat\u0103 o panou de control pentru fiecare dintre ele. Dar doar cel cu modul activ va afi\u0219a date necompletate.<\/p>\n<p><\/p>\n<p>Selecta\u021bi cel care are denumirea modulului dumneavoastr\u0103.<\/p>\n<p><\/p>\n<p>Acesta este \u0219ablonul principal. <strong>PacketBeat<\/strong>.<\/p>\n<p><\/p>\n<p><img decoding=\"async\" alt=\"ELK SIEM Open Distro: Vizualizarea panourilor de informa\u021bii ELK \u0219i SIEM \u00een ELK\" src=\"\/wp-content\/uploads\/2020\/08\/f895c527f746c6df4c7e4e43c4eee802.png\" style=\"display:block;margin: 0 auto;\" \/><\/p>\n<p><\/p>\n<p>Acesta este panoul de control al fluxurilor de re\u021bea. Ne va informa despre pachetele de intrare \u0219i ie\u0219ire, sursele \u0219i destina\u021biile adreselor IP, precum \u0219i va oferi multe informa\u021bii utile pentru analistul centrului de securitate.<\/p>\n<p><\/p>\n<p><img decoding=\"async\" alt=\"ELK SIEM Open Distro: Vizualizarea panourilor de informa\u021bii ELK \u0219i SIEM \u00een ELK\" src=\"\/wp-content\/uploads\/2020\/08\/1d319ebf0865ea4ad18c9f1a10d6182d.png\" style=\"display:block;margin: 0 auto;\" \/><\/p>\n<p><\/p>\n<p><img decoding=\"async\" alt=\"ELK SIEM Open Distro: Vizualizarea panourilor de informa\u021bii ELK \u0219i SIEM \u00een ELK\" src=\"\/wp-content\/uploads\/2020\/08\/fb4f7078d667bc3c402198c2c58c293d.png\" style=\"display:block;margin: 0 auto;\" \/><\/p>\n<p><\/p>\n<h3 id=\"3---sozdanie-vashih-pervyh-dashbordov\">3 \u2014 Crearea primelor dumneavoastr\u0103 tablouri de bord.<\/h3>\n<p><\/p>\n<h4 id=\"31--osnovnye-ponyatiya\">3\u20131- No\u021biuni de baz\u0103.<\/h4>\n<p><\/p>\n<p><strong>A- Tipuri de tablouri de bord:<\/strong><\/p>\n<p><\/p>\n<p>Acestea sunt diferite tipuri de vizualiz\u0103ri pe care le pute\u021bi folosi pentru a vizualiza datele dumneavoastr\u0103.<\/p>\n<p><\/p>\n<p>de exemplu, avem:<\/p>\n<p><\/p>\n<ul>\n<li>Histograme<\/li>\n<li>Hart\u0103<\/li>\n<li>Widget Markdown<\/li>\n<li>Diagram\u0103 circular\u0103<\/li>\n<\/ul>\n<p><\/p>\n<p><img decoding=\"async\" alt=\"ELK SIEM Open Distro: Vizualizarea panourilor de informa\u021bii ELK \u0219i SIEM \u00een ELK\" src=\"\/wp-content\/uploads\/2020\/08\/63a8cbb26fe1caa4c224fffca02a58ad.png\" style=\"display:block;margin: 0 auto;\" \/><\/p>\n<p><\/p>\n<p><strong>B- KQL (limbaj de interogare Kibana):<\/strong><\/p>\n<p><\/p>\n<p>Acesta este limbajul folosit \u00een Kibana pentru a facilita c\u0103utarea \u00een date. V\u0103 permite s\u0103 verifica\u021bi dac\u0103 anumite date exist\u0103, precum \u0219i multe alte func\u021bii utile. Pentru a afla mai multe, pute\u021bi studia informa\u021biile de la acest link.<\/p>\n<p><\/p>\n<p><noindex><a rel=\"nofollow\" href=\"https:\/\/www.elastic.co\/guide\/en\/kibana\/current\/kuery-query.html\">https:\/\/www.elastic.co\/guide\/en\/kibana\/current\/kuery-query.html<\/a><\/noindex><\/p>\n<p><\/p>\n<p>Acesta este un exemplu de interogare pentru a c\u0103uta un host cu Windows 10 pro.<\/p>\n<p><\/p>\n<p><img decoding=\"async\" alt=\"ELK SIEM Open Distro: Vizualizarea panourilor de informa\u021bii ELK \u0219i SIEM \u00een ELK\" src=\"\/wp-content\/uploads\/2020\/08\/2785f9afe1dfe463ad6b56febcfa04b8.png\" style=\"display:block;margin: 0 auto;\" \/><\/p>\n<p><\/p>\n<p><strong>C- Filtre:<\/strong><\/p>\n<p><\/p>\n<p>Aceast\u0103 func\u021bie v\u0103 va permite s\u0103 filtra\u021bi anumite parametri, cum ar fi numele hostului, codul sau identificatorul evenimentului etc. Filtrele vor \u00eembun\u0103t\u0103\u021bi semnificativ faza de investigare din perspectiva timpului \u0219i efortului necesar g\u0103sirii dovezilor.<\/p>\n<p><\/p>\n<p><strong>D- Prima vizualizare:<\/strong><\/p>\n<p><\/p>\n<p>Vom crea o vizualizare pentru MITER ATT &amp; CK.<\/p>\n<p><\/p>\n<p>Mai \u00eent\u00e2i trebuie s\u0103 mergem la <strong>Dashboard \u2192 Creare nou tablou de bord \u2192 crea\u021bi nou \u2192Diagram\u0103 circular\u0103<\/strong><\/p>\n<p><\/p>\n<p>Stabili\u021bi tipul pentru modelul de index, apoi atinge\u021bi denumirea bitului dumneavoastr\u0103.<\/p>\n<p><\/p>\n<p>Ap\u0103sa\u021bi Enter. P\u00e2n\u0103 \u00een acest moment, ar trebui s\u0103 vede\u021bi o pl\u0103cint\u0103 verde.<\/p>\n<p><\/p>\n<p>\u00cen fila Buckets din st\u00e2nga ve\u021bi g\u0103si:<\/p>\n<p><\/p>\n<p><img decoding=\"async\" alt=\"ELK SIEM Open Distro: Vizualizarea panourilor de informa\u021bii ELK \u0219i SIEM \u00een ELK\" src=\"\/wp-content\/uploads\/2020\/08\/432dd674f142ee33b4e248621638b9e8.png\" style=\"display:block;margin: 0 auto;\" \/><\/p>\n<p><\/p>\n<p> \u2014 Split slices va \u00eemp\u0103r\u021bi pl\u0103cinta \u00een p\u0103r\u021bi diferite \u00een func\u021bie de dispersia datelor.<\/p>\n<p><\/p>\n<p> \u2014 Split Chart va crea o alt\u0103 pl\u0103cint\u0103 l\u00e2ng\u0103 aceasta. <\/p>\n<p><\/p>\n<p>Vom folosi buc\u0103\u021bi \u00eemp\u0103r\u021bite.<\/p>\n<p><\/p>\n<p>Vom vizualiza datele \u00een func\u021bie de termenul selectat de noi. \u00cen acest caz, termenul se va referi la MITER ATT &amp; CK.<\/p>\n<p><\/p>\n<p>\u00cen Winlogbeat, c\u00e2mpul care ne va oferi aceste informa\u021bii se nume\u0219te:<\/p>\n<p><\/p>\n<pre><code class=\"plaintext\">winlog.event_data.RuleName<\/code><\/pre>\n<p><\/p>\n<p><strong>Vom stabili metrica de num\u0103rare pentru a ordona evenimentele \u00een func\u021bie de num\u0103rul de apari\u021bii.<\/strong><\/p>\n<p><\/p>\n<p>Activarea func\u021biei \u201eGrupare alte valori \u00eentr-un segment separat\u201d.<\/p>\n<p><\/p>\n<p>Aceasta va fi util dac\u0103 termenii pe care i-a\u021bi ales au multe semnifica\u021bii diferite, av\u00e2nd la baz\u0103 ritmul. Ajut\u0103 la vizualizarea celorlalte date ca un \u00eentreg. Aceasta v\u0103 va oferi o idee despre procentajul celorlalte evenimente.<\/p>\n<p><\/p>\n<p>Acum c\u0103 am terminat configurarea tab-ului de date, s\u0103 trecem la tab-ul de op\u021biuni.<\/p>\n<p><\/p>\n<p>Trebuie s\u0103 efectua\u021bi urm\u0103toarele:<\/p>\n<p><\/p>\n<p>** Elimina\u021bi forma donut-ului pentru a ap\u0103rea un cerc complet \u00een vizualizare.<\/p>\n<p><\/p>\n<p>** Alege\u021bi pozi\u021bia legendei care v\u0103 place. \u00cen acest caz, le vom afi\u0219a pe partea dreapt\u0103.<\/p>\n<p><\/p>\n<p>** Set\u0103rile de afisare a valorilor astfel \u00eenc\u00e2t s\u0103 fie vizibile l\u00e2ng\u0103 fragmentul lor pentru o lectur\u0103 mai u\u0219oar\u0103, l\u0103s\u00e2nd restul la set\u0103rile implicite.<\/p>\n<p><\/p>\n<p><img decoding=\"async\" alt=\"ELK SIEM Open Distro: Vizualizarea panourilor de informa\u021bii ELK \u0219i SIEM \u00een ELK\" src=\"\/wp-content\/uploads\/2020\/08\/9b2e230247a5277c198f196e96e5f6da.png\" style=\"display:block;margin: 0 auto;\" \/><\/p>\n<p><\/p>\n<p><strong>\u00centreruperea define\u0219te c\u00e2t de mult dori\u021bi s\u0103 fie afi\u0219at din numele evenimentului.<\/strong><\/p>\n<p><\/p>\n<p>Seta\u021bi timpul de \u00eenceput pentru vizualizare, apoi face\u021bi clic pe p\u0103tratul albastru.<\/p>\n<p><\/p>\n<p>Trebuie s\u0103 ob\u021bine\u021bi ceva asem\u0103n\u0103tor cu:<\/p>\n<p><\/p>\n<p><img decoding=\"async\" alt=\"ELK SIEM Open Distro: Vizualizarea panourilor de informa\u021bii ELK \u0219i SIEM \u00een ELK\" src=\"\/wp-content\/uploads\/2020\/08\/b89f5bf6aee38ff9019540b5f72b6c4c.png\" style=\"display:block;margin: 0 auto;\" \/><\/p>\n<p><\/p>\n<p>De asemenea, pute\u021bi ad\u0103uga un filtru la vizualizarea dvs. pentru a filtra un anumit host pe care dori\u021bi s\u0103-l verifica\u021bi sau orice parametri pe care \u00eei considera\u021bi utili pentru scopul dvs. Vizualizarea va ar\u0103ta doar datele care corespund regulii introduse \u00een filtru. \u00cen acest caz, vom afi\u0219a datele MITER ATT &amp; CK, provenite doar de pe host-ul numit win10.<\/p>\n<p><\/p>\n<p><img decoding=\"async\" alt=\"ELK SIEM Open Distro: Vizualizarea panourilor de informa\u021bii ELK \u0219i SIEM \u00een ELK\" src=\"\/wp-content\/uploads\/2020\/08\/aa6b4716d7e2cd27c9cc6b1a4acb25ae.png\" style=\"display:block;margin: 0 auto;\" \/><\/p>\n<p><\/p>\n<h4 id=\"32--sozdanie-vashey-pervoy-informacionnoy-paneli\">3\u20132- Crearea primului dvs. tablou de bord:<\/h4>\n<p><\/p>\n<p>Tabloul de bord este un set de multiple vizualiz\u0103ri. Tableau-urile dvs. trebuie s\u0103 fie clare, u\u0219or de \u00een\u021beles \u0219i s\u0103 con\u021bin\u0103 date utile \u0219i deterministe. Iat\u0103 un exemplu de tablouri de bord pe care le-am creat de la zero pentru winlogbeat.<\/p>\n<p><\/p>\n<p><img decoding=\"async\" alt=\"ELK SIEM Open Distro: Vizualizarea panourilor de informa\u021bii ELK \u0219i SIEM \u00een ELK\" src=\"\/wp-content\/uploads\/2020\/08\/d2da07c7fce7a96fa754c709bdedb8a0.png\" style=\"display:block;margin: 0 auto;\" \/><\/p>\n<p><\/p>\n<p>V\u0103 mul\u021bumim pentru timpul acordat. Sper\u0103m c\u0103 acest articol v-a fost util. Dac\u0103 dori\u021bi informa\u021bii mai detaliate pe aceast\u0103 tem\u0103, v\u0103 recomand\u0103m s\u0103 vizita\u021bi <noindex><a rel=\"nofollow\" href=\"https:\/\/www.elastic.co\/guide\/en\/kibana\/current\/tutorial-visualizing.html\">site-ul oficial<\/a><\/noindex>.<\/p>\n<p><\/p>\n<p>Chat-ul Telegram despre Elasticsearch: <noindex><a rel=\"nofollow\" href=\"https:\/\/t.me\/elasticsearch_ru\">https:\/\/t.me\/elasticsearch_ru<\/a><\/noindex><\/p>\n<p>Sursa: <a content=\"nofollow\" rel=\"nofollow\" href=\"https:\/\/habr.com\/ru\/post\/516050\/\">habr.com<\/a> <\/p>","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"excerpt":{"rendered":"<p>\u0412 \u044d\u0442\u043e\u043c \u043f\u043e\u0441\u0442\u0435 \u0431\u0443\u0434\u0435\u0442 \u043e\u043f\u0438\u0441\u0430\u043d\u0430 \u043d\u0430\u0441\u0442\u0440\u043e\u0439\u043a\u0430 \u0432\u0438\u0437\u0443\u0430\u043b\u0438\u0437\u0430\u0446\u0438\u0438 \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u043e\u043d\u043d\u044b\u0445 \u043f\u0430\u043d\u0435\u043b\u0435\u0439 ELK \u0438 SIEM \u0432 ELK \u0421\u0442\u0430\u0442\u044c\u044f \u0440\u0430\u0437\u0434\u0435\u043b\u0435\u043d\u0430 \u043d\u0430 \u0441\u043b\u0435\u0434\u0443\u044e\u0449\u0438\u0435 \u0440\u0430\u0437\u0434\u0435\u043b\u044b: 1- \u041e\u0431\u0437\u043e\u0440 ELK SIEM 2- \u0414\u0430\u0448\u0431\u043e\u0440\u0434\u044b \u043f\u043e \u0443\u043c\u043e\u043b\u0447\u0430\u043d\u0438\u044e 3- \u0421\u043e\u0437\u0434\u0430\u043d\u0438\u0435 \u0432\u0430\u0448\u0438\u0445 \u043f\u0435\u0440\u0432\u044b\u0445 \u0434\u0430\u0448\u0431\u043e\u0440\u0434\u043e\u0432 \u041e\u0433\u043b\u0430\u0432\u043b\u0435\u043d\u0438\u0435 \u0432\u0441\u0435\u0445 \u043f\u043e\u0441\u0442\u043e\u0432. \u0412\u0432\u0435\u0434\u0435\u043d\u0438\u0435. \u0420\u0430\u0437\u0432\u0435\u0440\u0442\u044b\u0432\u0430\u043d\u0438\u0435 \u0438\u043d\u0444\u0440\u0430\u0441\u0442\u0440\u0443\u043a\u0442\u0443\u0440\u044b \u0438 \u0442\u0435\u0445\u043d\u043e\u043b\u043e\u0433\u0438\u0439 \u0434\u043b\u044f SOC \u043a\u0430\u043a Service (SOCasS) ELK stack \u2014 \u0443\u0441\u0442\u0430\u043d\u043e\u0432\u043a\u0430 \u0438 \u043d\u0430\u0441\u0442\u0440\u043e\u0439\u043a\u0430 \u041f\u0440\u043e\u0433\u0443\u043b\u043a\u0430 \u043f\u043e open Distro [&hellip;]<\/p>\n","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"author":1,"featured_media":92076,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[688],"tags":[],"class_list":["post-92075","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-administrirovanie"],"aioseo_notices":[],"aioseo_head":"\n\t\t<!-- All in One SEO 5.0.2.1 - aioseo.com -->\n\t<meta name=\"description\" content=\"\u0412 \u044d\u0442\u043e\u043c \u043f\u043e\u0441\u0442\u0435 \u0431\u0443\u0434\u0435\u0442 \u043e\u043f\u0438\u0441\u0430\u043d\u0430 \u043d\u0430\u0441\u0442\u0440\u043e\u0439\u043a\u0430 \u0432\u0438\u0437\u0443\u0430\u043b\u0438\u0437\u0430\u0446\u0438\u0438 \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u043e\u043d\u043d\u044b\u0445 \u043f\u0430\u043d\u0435\u043b\u0435\u0439 ELK \u0438 SIEM \u0432 ELK \u0421\u0442\u0430\u0442\u044c\u044f \u0440\u0430\u0437\u0434\u0435\u043b\u0435\u043d\u0430 \u043d\u0430 \u0441\u043b\u0435\u0434\u0443\u044e\u0449\u0438\u0435 \u0440\u0430\u0437\u0434\u0435\u043b\u044b: 1- \u041e\u0431\u0437\u043e\u0440 ELK SIEM 2- \u0414\u0430\u0448\u0431\u043e\u0440\u0434\u044b \u043f\u043e \u0443\u043c\u043e\u043b\u0447\u0430\u043d\u0438\u044e 3- \u0421\u043e\u0437\u0434\u0430\u043d\u0438\u0435 \u0432\u0430\u0448\u0438\u0445.\" \/>\n\t<meta name=\"robots\" content=\"max-image-preview:large\" \/>\n\t<meta name=\"author\" content=\"Yuri Gagarin\"\/>\n\t<link rel=\"canonical\" href=\"https:\/\/prohoster.info\/ro\/blog\/administrirovanie\/elk-siem-open-distro-vizualizacziya-informaczionnyh-panelej-elk-i-siem-v-elk\" \/>\n\t<meta name=\"generator\" content=\"All in One SEO (AIOSEO) 5.0.2.1\" \/>\n\t\t<meta property=\"og:locale\" content=\"ro_RO\" \/>\n\t\t<meta property=\"og:site_name\" content=\"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b\" \/>\n\t\t<meta property=\"og:type\" content=\"article\" \/>\n\t\t<meta property=\"og:title\" content=\"\ud83e\udd47ELK SIEM Open Distro: \u0412\u0438\u0437\u0443\u0430\u043b\u0438\u0437\u0430\u0446\u0438\u044f \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u043e\u043d\u043d\u044b\u0445 \u043f\u0430\u043d\u0435\u043b\u0435\u0439 ELK \u0438 SIEM \u0432 ELK | ProHoster\" \/>\n\t\t<meta property=\"og:description\" content=\"\u0412 \u044d\u0442\u043e\u043c \u043f\u043e\u0441\u0442\u0435 \u0431\u0443\u0434\u0435\u0442 \u043e\u043f\u0438\u0441\u0430\u043d\u0430 \u043d\u0430\u0441\u0442\u0440\u043e\u0439\u043a\u0430 \u0432\u0438\u0437\u0443\u0430\u043b\u0438\u0437\u0430\u0446\u0438\u0438 \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u043e\u043d\u043d\u044b\u0445 \u043f\u0430\u043d\u0435\u043b\u0435\u0439 ELK \u0438 SIEM \u0432 ELK \u0421\u0442\u0430\u0442\u044c\u044f \u0440\u0430\u0437\u0434\u0435\u043b\u0435\u043d\u0430 \u043d\u0430 \u0441\u043b\u0435\u0434\u0443\u044e\u0449\u0438\u0435 \u0440\u0430\u0437\u0434\u0435\u043b\u044b: 1- \u041e\u0431\u0437\u043e\u0440 ELK SIEM 2- \u0414\u0430\u0448\u0431\u043e\u0440\u0434\u044b \u043f\u043e \u0443\u043c\u043e\u043b\u0447\u0430\u043d\u0438\u044e 3- \u0421\u043e\u0437\u0434\u0430\u043d\u0438\u0435 \u0432\u0430\u0448\u0438\u0445.\" \/>\n\t\t<meta property=\"og:url\" content=\"https:\/\/prohoster.info\/ro\/blog\/administrirovanie\/elk-siem-open-distro-vizualizacziya-informaczionnyh-panelej-elk-i-siem-v-elk\" \/>\n\t\t<meta property=\"og:image\" content=\"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg\" \/>\n\t\t<meta property=\"og:image:secure_url\" content=\"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg\" \/>\n\t\t<meta property=\"og:image:width\" content=\"350\" \/>\n\t\t<meta property=\"og:image:height\" content=\"350\" \/>\n\t\t<meta property=\"article:published_time\" content=\"2020-08-22T17:42:03+00:00\" \/>\n\t\t<meta property=\"article:modified_time\" content=\"2020-08-22T17:42:03+00:00\" \/>\n\t\t<meta property=\"article:publisher\" content=\"https:\/\/www.facebook.com\/prohoster\" \/>\n\t\t<meta property=\"article:author\" content=\"https:\/\/www.facebook.com\/prohoster\" \/>\n\t\t<!-- All in One SEO -->\n\n","aioseo_head_json":{"title":"\ud83e\udd47ELK SIEM Open Distro: Vizualizarea tablourilor de bord ELK \u0219i SIEM \u00een ELK | ProHoster","description":"\u00cen aceast\u0103 postare va fi descris\u0103 configurarea vizualiz\u0103rii tablourilor de bord ELK \u0219i SIEM \u00een ELK. Articolul este \u00eemp\u0103r\u021bit \u00een urm\u0103toarele sec\u021biuni: 1- Prezentare general\u0103 a ELK SIEM 2- Tablouri de bord implicite 3- Crearea dvs.","canonical_url":"https:\/\/prohoster.info\/ro\/blog\/administrirovanie\/elk-siem-open-distro-vizualizacziya-informaczionnyh-panelej-elk-i-siem-v-elk","robots":"max-image-preview:large","keywords":"","webmasterTools":{"miscellaneous":""},"schema":null,"og:locale":"ro_RO","og:site_name":"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b","og:type":"article","og:title":"\ud83e\udd47ELK SIEM Open Distro: \u0412\u0438\u0437\u0443\u0430\u043b\u0438\u0437\u0430\u0446\u0438\u044f \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u043e\u043d\u043d\u044b\u0445 \u043f\u0430\u043d\u0435\u043b\u0435\u0439 ELK \u0438 SIEM \u0432 ELK | ProHoster","og:description":"\u0412 \u044d\u0442\u043e\u043c \u043f\u043e\u0441\u0442\u0435 \u0431\u0443\u0434\u0435\u0442 \u043e\u043f\u0438\u0441\u0430\u043d\u0430 \u043d\u0430\u0441\u0442\u0440\u043e\u0439\u043a\u0430 \u0432\u0438\u0437\u0443\u0430\u043b\u0438\u0437\u0430\u0446\u0438\u0438 \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u043e\u043d\u043d\u044b\u0445 \u043f\u0430\u043d\u0435\u043b\u0435\u0439 ELK \u0438 SIEM \u0432 ELK \u0421\u0442\u0430\u0442\u044c\u044f \u0440\u0430\u0437\u0434\u0435\u043b\u0435\u043d\u0430 \u043d\u0430 \u0441\u043b\u0435\u0434\u0443\u044e\u0449\u0438\u0435 \u0440\u0430\u0437\u0434\u0435\u043b\u044b: 1- \u041e\u0431\u0437\u043e\u0440 ELK SIEM 2- \u0414\u0430\u0448\u0431\u043e\u0440\u0434\u044b \u043f\u043e \u0443\u043c\u043e\u043b\u0447\u0430\u043d\u0438\u044e 3- \u0421\u043e\u0437\u0434\u0430\u043d\u0438\u0435 \u0432\u0430\u0448\u0438\u0445.","og:url":"https:\/\/prohoster.info\/ro\/blog\/administrirovanie\/elk-siem-open-distro-vizualizacziya-informaczionnyh-panelej-elk-i-siem-v-elk","og:image":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:secure_url":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:width":350,"og:image:height":350,"article:published_time":"2020-08-22T17:42:03+00:00","article:modified_time":"2020-08-22T17:42:03+00:00","article:publisher":"https:\/\/www.facebook.com\/prohoster","article:author":"https:\/\/www.facebook.com\/prohoster"},"aioseo_meta_data":{"post_id":"92075","title":null,"description":null,"keywords":null,"keyphrases":null,"primary_term":null,"canonical_url":null,"og_title":null,"og_description":null,"og_object_type":"default","og_image_type":"default","og_image_url":null,"og_image_width":null,"og_image_height":null,"og_image_custom_url":null,"og_image_custom_fields":null,"og_video":null,"og_custom_url":null,"og_article_section":null,"og_article_tags":null,"twitter_use_og":false,"twitter_card":"default","twitter_image_type":"default","twitter_image_url":null,"twitter_image_custom_url":null,"twitter_image_custom_fields":null,"twitter_title":null,"twitter_description":null,"schema":{"blockGraphs":[],"customGraphs":[],"default":{"data":{"Article":[],"Course":[],"Dataset":[],"FAQPage":[],"Movie":[],"Person":[],"Product":[],"ProductReview":[],"Car":[],"Recipe":[],"Service":[],"SoftwareApplication":[],"WebPage":[]},"graphName":"","isEnabled":true},"graphs":[]},"schema_type":null,"schema_type_options":null,"pillar_content":false,"robots_default":true,"robots_noindex":false,"robots_noarchive":false,"robots_nosnippet":false,"robots_nofollow":false,"robots_noimageindex":false,"robots_noodp":false,"robots_notranslate":false,"robots_max_snippet":null,"robots_max_videopreview":null,"robots_max_imagepreview":"large","priority":null,"frequency":null,"local_seo":null,"seo_analyzer_scan_date":null,"breadcrumb_settings":null,"limit_modified_date":false,"reviewed_by":null,"ai":null,"created":"2021-02-28 12:15:36","updated":"2022-09-27 16:41:20","focus_keyword":null,"additional_keywords":null,"truseo_locale":null},"gt_translate_keys":[{"key":"link","format":"url"}],"_links":{"self":[{"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/posts\/92075","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/comments?post=92075"}],"version-history":[{"count":0,"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/posts\/92075\/revisions"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/media\/92076"}],"wp:attachment":[{"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/media?parent=92075"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/categories?post=92075"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/tags?post=92075"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}