{"id":92075,"date":"2020-08-22T19:42:03","date_gmt":"2020-08-22T17:42:03","guid":{"rendered":"https:\/\/prohoster.info\/blog\/administrirovanie\/elk-siem-open-distro-vizualizacziya-informaczionnyh-panelej-elk-i-siem-v-elk"},"modified":"2020-08-22T19:42:03","modified_gmt":"2020-08-22T17:42:03","slug":"elk-siem-open-distro-vizualizacziya-informaczionnyh-panelej-elk-i-siem-v-elk","status":"publish","type":"post","link":"https:\/\/prohoster.info\/sq\/blog\/administrirovanie\/elk-siem-open-distro-vizualizacziya-informaczionnyh-panelej-elk-i-siem-v-elk","title":{"rendered":"ELK SIEM Open Distro: Vizualizimi i paneleve informuese ELK dhe SIEM n\u00eb ELK","gt_translate_keys":[{"key":"rendered","format":"text"}]},"content":{"rendered":"<p>Ky post do t\u00eb p\u00ebrshkruaj\u00eb konfigurimin e vizualizimit t\u00eb paneleve informuese ELK dhe SIEM n\u00eb ELK<br \/>\nArtikulli \u00ebsht\u00eb i ndar\u00eb n\u00eb seksionet e m\u00ebposhtme:<\/p>\n<p><\/p>\n<p>1- P\u00ebrmbledhje e ELK SIEM<br \/>\n2- Panelet standarde<br \/>\n3- Krijimi i paneleve tuaja t\u00eb para<\/p>\n<p><noindex><a rel=\"nofollow\" name=\"habracut\"><\/a><\/noindex><\/p>\n<p>Tabela e p\u00ebrmbajtjes s\u00eb t\u00eb gjitha postimeve.<\/p>\n<p><\/p>\n<ul>\n<li><noindex><a rel=\"nofollow\" href=\"https:\/\/habr.com\/ru\/post\/515576\/\">Hyrje. Zhvillimi i infrastruktur\u00ebs dhe teknologjive p\u00ebr SOC si Sh\u00ebrbim (SOCasS)<\/a><\/noindex><\/li>\n<li><noindex><a rel=\"nofollow\" href=\"https:\/\/habr.com\/ru\/post\/515722\/\">ELK stack \u2014 instalimi dhe konfigurimi<\/a><\/noindex><\/li>\n<li><noindex><a rel=\"nofollow\" href=\"https:\/\/habr.com\/ru\/post\/515920\/\">Sh\u00ebtitje n\u00eb open Distro<\/a><\/noindex><\/li>\n<li><noindex><a rel=\"nofollow\" href=\"https:\/\/habr.com\/ru\/post\/516050\/\">Vizualizimi i Dashboards dhe ELK SIEM<\/a><\/noindex><\/li>\n<li>Integrimi me WAZUH<\/li>\n<li>Njoftimi (Alerting)<\/li>\n<li>Raportimi<\/li>\n<li>Menaxhimi i rasteve<\/li>\n<\/ul>\n<p><\/p>\n<h3 id=\"1-obzor-elk-siem\">1-P\u00ebrmbledhje e ELK SIEM<\/h3>\n<p><\/p>\n<p>ELK SIEM u shtua s\u00eb fundmi n\u00eb stack-un elk n\u00eb versionin 7.2, m\u00eb 25 qershor 2019.<\/p>\n<p><\/p>\n<p>Ky \u00ebsht\u00eb nj\u00eb zgjidhje SIEM, e krijuar nga elastic.co, p\u00ebr t\u00eb b\u00ebr\u00eb jet\u00ebn e analistit t\u00eb siguris\u00eb shum\u00eb m\u00eb t\u00eb leht\u00eb dhe m\u00eb pak t\u00eb lodhshme.<\/p>\n<p><\/p>\n<p>N\u00eb versionin ton\u00eb t\u00eb pun\u00ebs, ne vendos\u00ebm t\u00eb krijojm\u00eb nj\u00eb SIEM t\u00eb vetin dhe t\u00eb zgjedhim panelin ton\u00eb t\u00eb menaxhimit.<\/p>\n<p><\/p>\n<p>Por ne mendojm\u00eb se \u00ebsht\u00eb e r\u00ebnd\u00ebsishme t\u00eb studiojm\u00eb fillimisht ELK SIEM.<\/p>\n<p><\/p>\n<h4 id=\"11--razdel-host-events\">1.1- Seksioni i ngjarjeve t\u00eb hostit<\/h4>\n<p><\/p>\n<p>Fillimisht, do t\u00eb shqyrtojm\u00eb seksionin e hostit. Seksioni i hostit do t'ju lejoj\u00eb t\u00eb shihni ngjarjet q\u00eb gjenerohen n\u00eb pik\u00ebn p\u00ebrfundimtare.<\/p>\n<p><\/p>\n<p><img decoding=\"async\" alt=\"ELK SIEM Open Distro: Vizualizimi i paneleve informuese ELK dhe SIEM n\u00eb ELK\" src=\"\/wp-content\/uploads\/2020\/08\/54ebe976e6479930ca8d20cfacdc0d8d.png\" style=\"display:block;margin: 0 auto;\" \/><\/p>\n<p><\/p>\n<p><img decoding=\"async\" alt=\"ELK SIEM Open Distro: Vizualizimi i paneleve informuese ELK dhe SIEM n\u00eb ELK\" src=\"\/wp-content\/uploads\/2020\/08\/e0862fafaa4ad1ba34714339a33c698f.png\" style=\"display:block;margin: 0 auto;\" \/><\/p>\n<p><\/p>\n<p>Pas klikimit n\u00eb shikimin e hosteve, duhet t\u00eb merrni di\u00e7ka t\u00eb till\u00eb. Si\u00e7 e shihni, ky kompjuter \u00ebsht\u00eb i lidhur me tre hoste:<\/p>\n<p><\/p>\n<p>1 Windows 10.<\/p>\n<p><\/p>\n<p>2 Server Ubuntu 18.04.<\/p>\n<p><\/p>\n<p>Ne kemi disa pamje vizuale q\u00eb shfaqin lloje t\u00eb ndryshme ngjarjesh.<\/p>\n<p><\/p>\n<p>P\u00ebr shembull, ajo n\u00eb mes tregon t\u00eb dh\u00ebnat e hyrjeve n\u00eb t\u00eb tri makinat.<\/p>\n<p><\/p>\n<p>Kjo sasi t\u00eb dh\u00ebnash q\u00eb shihni k\u00ebtu \u00ebsht\u00eb mbledhur p\u00ebr pes\u00eb dit\u00eb. Kjo shpjegon numrin e madh t\u00eb hyrjeve t\u00eb pasuksesshme dhe t\u00eb suksesshme. Probabilisht do t\u00eb keni nj\u00eb num\u00ebr t\u00eb vog\u00ebl log\u00ebsh, k\u00ebshtu q\u00eb mos u shqet\u00ebsoni.<\/p>\n<p><\/p>\n<h4 id=\"12--razdel-setevyh-sobytiy\">1.2 - Seksioni i ngjarjeve rrjetike<\/h4>\n<p><\/p>\n<p>Duke kaluar n\u00eb seksionin e rrjetit, duhet t\u00eb merrni di\u00e7ka si kjo. Ky seksion do t'ju lejoj\u00eb t\u00eb ndiqni me kujdes gjith\u00e7ka q\u00eb ndodh n\u00eb rrjetin tuaj, nga trafiku HTTP \/ TLS deri te trafiku DNS dhe paralajm\u00ebrimet e jashtme t\u00eb ngjarjeve.<\/p>\n<p><\/p>\n<p><img decoding=\"async\" alt=\"ELK SIEM Open Distro: Vizualizimi i paneleve informuese ELK dhe SIEM n\u00eb ELK\" src=\"\/wp-content\/uploads\/2020\/08\/3ebae3d5e85dd84556eb26901c2fd519.png\" style=\"display:block;margin: 0 auto;\" \/><\/p>\n<p><\/p>\n<p><img decoding=\"async\" alt=\"ELK SIEM Open Distro: Vizualizimi i paneleve informuese ELK dhe SIEM n\u00eb ELK\" src=\"\/wp-content\/uploads\/2020\/08\/344db7fac06acabaa011657debb52993.png\" style=\"display:block;margin: 0 auto;\" \/><\/p>\n<p><\/p>\n<h3 id=\"2--dashbordy-po-umolchaniyu\">2- Panelet standarde<\/h3>\n<p><\/p>\n<p>P\u00ebr t\u00eb leht\u00ebsuar jet\u00ebn e p\u00ebrdoruesve, zhvilluesit e elastic.co krijuan nj\u00eb tabel\u00eb instrumentesh t\u00eb paracaktuar, q\u00eb mb\u00ebshtetet zyrtarisht nga ELK. Bitet tona nuk ishin nj\u00eb p\u00ebrjashtim nga kjo rregull. K\u00ebtu do t\u00eb marr si shembull tabel\u00ebn e monitorimit Packetbeat t\u00eb paracaktuar.<\/p>\n<p><\/p>\n<p>N\u00ebse keni p\u00ebrfunduar sakt\u00ebsisht hapin e dyt\u00eb t\u00eb artikullit. Duhet t\u00eb keni nj\u00eb tabel\u00eb instrumentesh q\u00eb ju pret. Le t\u00eb fillojm\u00eb.<\/p>\n<p><\/p>\n<p>N\u00eb sked\u00ebn e majt\u00eb t\u00eb Kibana, p\u00ebrzgjidhni simbolin e tabel\u00ebs s\u00eb instrumenteve. Ky \u00ebsht\u00eb i treti, n\u00ebse e num\u00ebroni nga lart.<\/p>\n<p><\/p>\n<p>Shkruani emrin e ndarjes n\u00eb sked\u00ebn e k\u00ebrkimit.<\/p>\n<p><\/p>\n<p>N\u00ebse ka disa module n\u00eb bit, do t\u00eb krijohet nj\u00eb panel kontrolli p\u00ebr secilin prej tyre. Por vet\u00ebm ai, q\u00eb ka modulin e aktivizuar, do t\u00eb tregoj\u00eb t\u00eb dh\u00ebna jo t\u00eb zbraz\u00ebta.<\/p>\n<p><\/p>\n<p>Zgjidhni at\u00eb q\u00eb ka emrin e modulit tuaj.<\/p>\n<p><\/p>\n<p>Ky \u00ebsht\u00eb modeli kryesor. <strong>PacketBeat<\/strong>.<\/p>\n<p><\/p>\n<p><img decoding=\"async\" alt=\"ELK SIEM Open Distro: Vizualizimi i paneleve informuese ELK dhe SIEM n\u00eb ELK\" src=\"\/wp-content\/uploads\/2020\/08\/f895c527f746c6df4c7e4e43c4eee802.png\" style=\"display:block;margin: 0 auto;\" \/><\/p>\n<p><\/p>\n<p>Ky \u00ebsht\u00eb paneli i monitorimit t\u00eb flukseve rrjet. Ai do t\u00eb na informoj\u00eb mbi paketat e ardhshme dhe dal\u00ebse, burimet dhe destinacionet e adresave IP, si dhe do t\u00eb ofroj\u00eb shum\u00eb informacion t\u00eb dobish\u00ebm p\u00ebr analistin e qendr\u00ebs s\u00eb siguris\u00eb.<\/p>\n<p><\/p>\n<p><img decoding=\"async\" alt=\"ELK SIEM Open Distro: Vizualizimi i paneleve informuese ELK dhe SIEM n\u00eb ELK\" src=\"\/wp-content\/uploads\/2020\/08\/1d319ebf0865ea4ad18c9f1a10d6182d.png\" style=\"display:block;margin: 0 auto;\" \/><\/p>\n<p><\/p>\n<p><img decoding=\"async\" alt=\"ELK SIEM Open Distro: Vizualizimi i paneleve informuese ELK dhe SIEM n\u00eb ELK\" src=\"\/wp-content\/uploads\/2020\/08\/fb4f7078d667bc3c402198c2c58c293d.png\" style=\"display:block;margin: 0 auto;\" \/><\/p>\n<p><\/p>\n<h3 id=\"3---sozdanie-vashih-pervyh-dashbordov\">3 \u2014 Krijimi i tabelave tuaja t\u00eb para<\/h3>\n<p><\/p>\n<h4 id=\"31--osnovnye-ponyatiya\">3\u20131- Konceptet themelore<\/h4>\n<p><\/p>\n<p><strong>A- Llojet e tabelave:<\/strong><\/p>\n<p><\/p>\n<p>K\u00ebto jan\u00eb lloje t\u00eb ndryshme vizualizimesh q\u00eb mund t\u00eb p\u00ebrdorni p\u00ebr t\u00eb vizualizuar t\u00eb dh\u00ebnat tuaja.<\/p>\n<p><\/p>\n<p>p.sh., ne kemi:<\/p>\n<p><\/p>\n<ul>\n<li>Histograma<\/li>\n<li>Harta<\/li>\n<li>Widget Markdown<\/li>\n<li>Grafiku me rrethe<\/li>\n<\/ul>\n<p><\/p>\n<p><img decoding=\"async\" alt=\"ELK SIEM Open Distro: Vizualizimi i paneleve informuese ELK dhe SIEM n\u00eb ELK\" src=\"\/wp-content\/uploads\/2020\/08\/63a8cbb26fe1caa4c224fffca02a58ad.png\" style=\"display:block;margin: 0 auto;\" \/><\/p>\n<p><\/p>\n<p><strong>B- KQL (gjuh\u00eb k\u00ebrkimi Kibana):<\/strong><\/p>\n<p><\/p>\n<p>Kjo \u00ebsht\u00eb gjuha e p\u00ebrdorur n\u00eb Kibana p\u00ebr k\u00ebrkimin efikas n\u00eb t\u00eb dh\u00ebna. Kjo ju lejon t\u00eb verifikoni n\u00ebse t\u00eb dh\u00ebna t\u00eb caktuara ekzistojn\u00eb, dhe shum\u00eb funksione t\u00eb tjera t\u00eb dobishme. P\u00ebr t\u00eb m\u00ebsuar m\u00eb shum\u00eb, mund t\u00eb studioni informacionin n\u00eb k\u00ebt\u00eb link.<\/p>\n<p><\/p>\n<p><noindex><a rel=\"nofollow\" href=\"https:\/\/www.elastic.co\/guide\/en\/kibana\/current\/kuery-query.html\">https:\/\/www.elastic.co\/guide\/en\/kibana\/current\/kuery-query.html<\/a><\/noindex><\/p>\n<p><\/p>\n<p>Ky \u00ebsht\u00eb nj\u00eb shembull i nj\u00eb k\u00ebrkese p\u00ebr t\u00eb gjetur nj\u00eb host me sistemin Windows 10 pro.<\/p>\n<p><\/p>\n<p><img decoding=\"async\" alt=\"ELK SIEM Open Distro: Vizualizimi i paneleve informuese ELK dhe SIEM n\u00eb ELK\" src=\"\/wp-content\/uploads\/2020\/08\/2785f9afe1dfe463ad6b56febcfa04b8.png\" style=\"display:block;margin: 0 auto;\" \/><\/p>\n<p><\/p>\n<p><strong>C- Filtrat:<\/strong><\/p>\n<p><\/p>\n<p>Kjo funksionalitet do t'ju lejoj\u00eb t\u00eb filtroni parametra t\u00eb caktuar, si emri i hostit, kodi ose identifikuesi i ngjarjes, etj. Filtrat do t\u00eb p\u00ebrmir\u00ebsojn\u00eb ndjesh\u00ebm faz\u00ebn hetimore n\u00eb aspektin e koh\u00ebs dhe p\u00ebrpjekjeve t\u00eb nevojshme p\u00ebr t\u00eb gjetur prova.<\/p>\n<p><\/p>\n<p><strong>D- Vizualizimi i par\u00eb:<\/strong><\/p>\n<p><\/p>\n<p>Do t\u00eb krijojm\u00eb nj\u00eb vizualizim p\u00ebr MITER ATT &amp; CK.<\/p>\n<p><\/p>\n<p>S\u00eb pari, na nevojitet t\u00eb kalojm\u00eb n\u00eb <strong>Dashboard \u2192 Krijo nj\u00eb panel t\u00eb ri \u2192 krijo t\u00eb ri \u2192 Panel me pie<\/strong><\/p>\n<p><\/p>\n<p>Vendosni llojin p\u00ebr modelin e indeksit, pastaj prekni titullin e biskot\u00ebs tuaj.<\/p>\n<p><\/p>\n<p>Shtypni Enter. N\u00eb k\u00ebt\u00eb moment, duhet t\u00eb shihni nj\u00eb donut t\u00eb greensh.<\/p>\n<p><\/p>\n<p>N\u00eb sked\u00ebn Buckets majtas do t\u00eb gjeni:<\/p>\n<p><\/p>\n<p><img decoding=\"async\" alt=\"ELK SIEM Open Distro: Vizualizimi i paneleve informuese ELK dhe SIEM n\u00eb ELK\" src=\"\/wp-content\/uploads\/2020\/08\/432dd674f142ee33b4e248621638b9e8.png\" style=\"display:block;margin: 0 auto;\" \/><\/p>\n<p><\/p>\n<p> \u2014 Split slices do t\u00eb ndaj\u00eb donut-in n\u00eb pjese t\u00eb ndryshme n\u00eb var\u00ebsi t\u00eb shp\u00ebrndarjes s\u00eb t\u00eb dh\u00ebnave.<\/p>\n<p><\/p>\n<p> \u2014 Split Chart do t\u00eb krijoj\u00eb nj\u00eb donut tjet\u00ebr af\u00ebr k\u00ebtij. <\/p>\n<p><\/p>\n<p>Do t\u00eb p\u00ebrdorim pjes\u00ebt e ndara.<\/p>\n<p><\/p>\n<p>Do t\u00eb vizualizojm\u00eb t\u00eb dh\u00ebnat tona n\u00eb var\u00ebsi t\u00eb termit q\u00eb kemi zgjedhur. N\u00eb k\u00ebt\u00eb rast, termini do t\u00eb lidhet me MITER ATT &amp; CK.<\/p>\n<p><\/p>\n<p>N\u00eb Winlogbeat, fusha q\u00eb do t\u00eb na siguroj\u00eb k\u00ebt\u00eb informacion quhet:<\/p>\n<p><\/p>\n<pre><code class=\"plaintext\">winlog.event_data.RuleName<\/code><\/pre>\n<p><\/p>\n<p><strong>Do t\u00eb vendosim nj\u00eb metrik\u00eb num\u00ebrimi p\u00ebr t\u00eb renditur ngjarjet n\u00eb var\u00ebsi t\u00eb numrit t\u00eb shfaqjeve t\u00eb tyre.<\/strong><\/p>\n<p><\/p>\n<p>Aktivizoni funksionin \"Gruponi vlera t\u00eb tjera n\u00eb nj\u00eb segment t\u00eb ve\u00e7ant\u00eb\".<\/p>\n<p><\/p>\n<p>Kjo do t\u00eb jet\u00eb e dobishme n\u00ebse termat q\u00eb keni zgjedhur kan\u00eb shum\u00eb kuptime t\u00eb ndryshme q\u00eb rrjedhin nga ritmi. Kjo ndihmon n\u00eb vizualizimin e t\u00eb dh\u00ebnave t\u00eb tjera si nj\u00eb t\u00ebr\u00ebsi. Kjo do t'ju jap\u00eb nj\u00eb paraqitje t\u00eb p\u00ebrqindjes s\u00eb ngjarjeve t\u00eb tjera.<\/p>\n<p><\/p>\n<p>Tani, kur kemi p\u00ebrfunduar konfigurimin e sked\u00ebs s\u00eb t\u00eb dh\u00ebnave, le t\u00eb kalojm\u00eb n\u00eb sked\u00ebn e parametrave.<\/p>\n<p><\/p>\n<p>Duhet t\u00eb b\u00ebni sa vijon:<\/p>\n<p><\/p>\n<p>** Hiqni form\u00ebn e donuts p\u00ebr t\u00eb b\u00ebr\u00eb q\u00eb rrethi t\u00eb shfaqet plot\u00ebsisht n\u00eb vizualizim.<\/p>\n<p><\/p>\n<p>** Zgjidhni pozit\u00ebn e legjend\u00ebs q\u00eb ju p\u00eblqen. N\u00eb k\u00ebt\u00eb rast, ne do t'i tregojm\u00eb ato nga ana e djatht\u00eb.<\/p>\n<p><\/p>\n<p>** P\u00ebrcaktoni vlerat e shfaqjes p\u00ebr t'u shfaqur pran\u00eb fragmentit t\u00eb tyre p\u00ebr leht\u00ebsimin e leximit, nd\u00ebrsa t\u00eb tjerat l\u00ebrini si\u00e7 jan\u00eb.<\/p>\n<p><\/p>\n<p><img decoding=\"async\" alt=\"ELK SIEM Open Distro: Vizualizimi i paneleve informuese ELK dhe SIEM n\u00eb ELK\" src=\"\/wp-content\/uploads\/2020\/08\/9b2e230247a5277c198f196e96e5f6da.png\" style=\"display:block;margin: 0 auto;\" \/><\/p>\n<p><\/p>\n<p><strong>Prerja p\u00ebrcakton sa d\u00ebshironi t\u00eb shfaqni nga emri i ngjarjes.<\/strong><\/p>\n<p><\/p>\n<p>Caktoni koh\u00ebn nga e cila duhet t\u00eb filloj\u00eb vizualizimi, pastaj klikoni n\u00eb katrorin blu.<\/p>\n<p><\/p>\n<p>Duhet t\u00eb keni di\u00e7ka t\u00eb till\u00eb:<\/p>\n<p><\/p>\n<p><img decoding=\"async\" alt=\"ELK SIEM Open Distro: Vizualizimi i paneleve informuese ELK dhe SIEM n\u00eb ELK\" src=\"\/wp-content\/uploads\/2020\/08\/b89f5bf6aee38ff9019540b5f72b6c4c.png\" style=\"display:block;margin: 0 auto;\" \/><\/p>\n<p><\/p>\n<p>Mund t\u00eb shtoni nj\u00eb filt\u00ebr n\u00eb vizualizimin tuaj p\u00ebr t\u00eb filtruar nj\u00eb host t\u00eb caktuar q\u00eb d\u00ebshironi t\u00eb kontrolloni, ose \u00e7do parametrin q\u00eb mendoni se \u00ebsht\u00eb e dobishme p\u00ebr q\u00ebllimin tuaj. Vizualizimi do t\u00eb tregoj\u00eb vet\u00ebm t\u00eb dh\u00ebnat q\u00eb p\u00ebrputhen me rregullin q\u00eb \u00ebsht\u00eb vendosur n\u00eb filt\u00ebr. N\u00eb k\u00ebt\u00eb rast, ne do t\u00eb tregojm\u00eb t\u00eb dh\u00ebnat MITER ATT &amp; CK, q\u00eb vijn\u00eb vet\u00ebm nga hosti me emrin win10.<\/p>\n<p><\/p>\n<p><img decoding=\"async\" alt=\"ELK SIEM Open Distro: Vizualizimi i paneleve informuese ELK dhe SIEM n\u00eb ELK\" src=\"\/wp-content\/uploads\/2020\/08\/aa6b4716d7e2cd27c9cc6b1a4acb25ae.png\" style=\"display:block;margin: 0 auto;\" \/><\/p>\n<p><\/p>\n<h4 id=\"32--sozdanie-vashey-pervoy-informacionnoy-paneli\">3\u20132- Krijimi i panelit tuaj t\u00eb par\u00eb t\u00eb informacionit:<\/h4>\n<p><\/p>\n<p>Paneli i monitorimit \u00ebsht\u00eb nj\u00eb koleksion i shum\u00eb vizualizimeve. Panelet tuaja t\u00eb informacionit duhet t\u00eb jen\u00eb t\u00eb qarta, t\u00eb kuptueshme dhe t\u00eb p\u00ebrmbajn\u00eb t\u00eb dh\u00ebna t\u00eb dobishme dhe t\u00eb determinuara. Ja nj\u00eb shembull i paneleve t\u00eb informacionit q\u00eb ne kemi krijuar nga fillimi p\u00ebr winlogbeat.<\/p>\n<p><\/p>\n<p><img decoding=\"async\" alt=\"ELK SIEM Open Distro: Vizualizimi i paneleve informuese ELK dhe SIEM n\u00eb ELK\" src=\"\/wp-content\/uploads\/2020\/08\/d2da07c7fce7a96fa754c709bdedb8a0.png\" style=\"display:block;margin: 0 auto;\" \/><\/p>\n<p><\/p>\n<p>Faleminderit p\u00ebr koh\u00ebn tuaj. Shpresojm\u00eb q\u00eb ky artikull ka qen\u00eb i dobish\u00ebm p\u00ebr ju. N\u00ebse d\u00ebshironi t\u00eb merrni m\u00eb shum\u00eb informacion mbi tem\u00ebn, ne rekomandojm\u00eb t\u00eb vizitoni <noindex><a rel=\"nofollow\" href=\"https:\/\/www.elastic.co\/guide\/en\/kibana\/current\/tutorial-visualizing.html\">site i zyrtar<\/a><\/noindex>.<\/p>\n<p><\/p>\n<p>Bised\u00ebn n\u00eb Telegram p\u00ebr Elasticsearch: <noindex><a rel=\"nofollow\" href=\"https:\/\/t.me\/elasticsearch_ru\">https:\/\/t.me\/elasticsearch_ru<\/a><\/noindex><\/p>\n<p>Burimi: <a content=\"nofollow\" rel=\"nofollow\" href=\"https:\/\/habr.com\/ru\/post\/516050\/\">habr.com<\/a> <\/p>","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"excerpt":{"rendered":"<p>\u0412 \u044d\u0442\u043e\u043c \u043f\u043e\u0441\u0442\u0435 \u0431\u0443\u0434\u0435\u0442 \u043e\u043f\u0438\u0441\u0430\u043d\u0430 \u043d\u0430\u0441\u0442\u0440\u043e\u0439\u043a\u0430 \u0432\u0438\u0437\u0443\u0430\u043b\u0438\u0437\u0430\u0446\u0438\u0438 \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u043e\u043d\u043d\u044b\u0445 \u043f\u0430\u043d\u0435\u043b\u0435\u0439 ELK \u0438 SIEM \u0432 ELK \u0421\u0442\u0430\u0442\u044c\u044f \u0440\u0430\u0437\u0434\u0435\u043b\u0435\u043d\u0430 \u043d\u0430 \u0441\u043b\u0435\u0434\u0443\u044e\u0449\u0438\u0435 \u0440\u0430\u0437\u0434\u0435\u043b\u044b: 1- \u041e\u0431\u0437\u043e\u0440 ELK SIEM 2- \u0414\u0430\u0448\u0431\u043e\u0440\u0434\u044b \u043f\u043e \u0443\u043c\u043e\u043b\u0447\u0430\u043d\u0438\u044e 3- \u0421\u043e\u0437\u0434\u0430\u043d\u0438\u0435 \u0432\u0430\u0448\u0438\u0445 \u043f\u0435\u0440\u0432\u044b\u0445 \u0434\u0430\u0448\u0431\u043e\u0440\u0434\u043e\u0432 \u041e\u0433\u043b\u0430\u0432\u043b\u0435\u043d\u0438\u0435 \u0432\u0441\u0435\u0445 \u043f\u043e\u0441\u0442\u043e\u0432. \u0412\u0432\u0435\u0434\u0435\u043d\u0438\u0435. \u0420\u0430\u0437\u0432\u0435\u0440\u0442\u044b\u0432\u0430\u043d\u0438\u0435 \u0438\u043d\u0444\u0440\u0430\u0441\u0442\u0440\u0443\u043a\u0442\u0443\u0440\u044b \u0438 \u0442\u0435\u0445\u043d\u043e\u043b\u043e\u0433\u0438\u0439 \u0434\u043b\u044f SOC \u043a\u0430\u043a Service (SOCasS) ELK stack \u2014 \u0443\u0441\u0442\u0430\u043d\u043e\u0432\u043a\u0430 \u0438 \u043d\u0430\u0441\u0442\u0440\u043e\u0439\u043a\u0430 \u041f\u0440\u043e\u0433\u0443\u043b\u043a\u0430 \u043f\u043e open Distro [&hellip;]<\/p>\n","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"author":1,"featured_media":92076,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[688],"tags":[],"class_list":["post-92075","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-administrirovanie"],"aioseo_notices":[],"aioseo_head":"\n\t\t<!-- All in One SEO 4.9.10 - aioseo.com -->\n\t<meta name=\"description\" content=\"\u0412 \u044d\u0442\u043e\u043c \u043f\u043e\u0441\u0442\u0435 \u0431\u0443\u0434\u0435\u0442 \u043e\u043f\u0438\u0441\u0430\u043d\u0430 \u043d\u0430\u0441\u0442\u0440\u043e\u0439\u043a\u0430 \u0432\u0438\u0437\u0443\u0430\u043b\u0438\u0437\u0430\u0446\u0438\u0438 \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u043e\u043d\u043d\u044b\u0445 \u043f\u0430\u043d\u0435\u043b\u0435\u0439 ELK \u0438 SIEM \u0432 ELK \u0421\u0442\u0430\u0442\u044c\u044f \u0440\u0430\u0437\u0434\u0435\u043b\u0435\u043d\u0430 \u043d\u0430 \u0441\u043b\u0435\u0434\u0443\u044e\u0449\u0438\u0435 \u0440\u0430\u0437\u0434\u0435\u043b\u044b: 1- \u041e\u0431\u0437\u043e\u0440 ELK SIEM 2- \u0414\u0430\u0448\u0431\u043e\u0440\u0434\u044b \u043f\u043e \u0443\u043c\u043e\u043b\u0447\u0430\u043d\u0438\u044e 3- \u0421\u043e\u0437\u0434\u0430\u043d\u0438\u0435 \u0432\u0430\u0448\u0438\u0445 \u043f\u0435\u0440\u0432\u044b\u0445 \u0434\u0430\u0448\u0431\u043e\u0440\u0434\u043e\u0432 \u041e\u0433\u043b\u0430\u0432\u043b\u0435\u043d\u0438\u0435 \u0432\u0441\u0435\u0445 \u043f\u043e\u0441\u0442\u043e\u0432. \u0412\u0432\u0435\u0434\u0435\u043d\u0438\u0435. \u0420\u0430\u0437\u0432\u0435\u0440\u0442\u044b\u0432\u0430\u043d\u0438\u0435 \u0438\u043d\u0444\u0440\u0430\u0441\u0442\u0440\u0443\u043a\u0442\u0443\u0440\u044b \u0438 \u0442\u0435\u0445\u043d\u043e\u043b\u043e\u0433\u0438\u0439 \u0434\u043b\u044f SOC \u043a\u0430\u043a Service (SOCasS) ELK stack \u2014 \u0443\u0441\u0442\u0430\u043d\u043e\u0432\u043a\u0430 \u0438 \u043d\u0430\u0441\u0442\u0440\u043e\u0439\u043a\u0430 \u041f\u0440\u043e\u0433\u0443\u043b\u043a\u0430 \u043f\u043e open Distro\" \/>\n\t<meta name=\"robots\" content=\"max-image-preview:large\" \/>\n\t<meta name=\"author\" content=\"Yuri Gagarin\"\/>\n\t<link rel=\"canonical\" href=\"https:\/\/prohoster.info\/sq\/blog\/administrirovanie\/elk-siem-open-distro-vizualizacziya-informaczionnyh-panelej-elk-i-siem-v-elk\" \/>\n\t<meta name=\"generator\" content=\"All in One SEO (AIOSEO) 4.9.10\" \/>\n\t\t<meta property=\"og:locale\" content=\"sq_AL\" \/>\n\t\t<meta property=\"og:site_name\" content=\"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b\" \/>\n\t\t<meta property=\"og:type\" content=\"article\" \/>\n\t\t<meta property=\"og:title\" content=\"\ud83e\udd47ELK SIEM Open Distro: \u0412\u0438\u0437\u0443\u0430\u043b\u0438\u0437\u0430\u0446\u0438\u044f \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u043e\u043d\u043d\u044b\u0445 \u043f\u0430\u043d\u0435\u043b\u0435\u0439 ELK \u0438 SIEM \u0432 ELK | ProHoster\" \/>\n\t\t<meta property=\"og:description\" content=\"\u0412 \u044d\u0442\u043e\u043c \u043f\u043e\u0441\u0442\u0435 \u0431\u0443\u0434\u0435\u0442 \u043e\u043f\u0438\u0441\u0430\u043d\u0430 \u043d\u0430\u0441\u0442\u0440\u043e\u0439\u043a\u0430 \u0432\u0438\u0437\u0443\u0430\u043b\u0438\u0437\u0430\u0446\u0438\u0438 \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u043e\u043d\u043d\u044b\u0445 \u043f\u0430\u043d\u0435\u043b\u0435\u0439 ELK \u0438 SIEM \u0432 ELK \u0421\u0442\u0430\u0442\u044c\u044f \u0440\u0430\u0437\u0434\u0435\u043b\u0435\u043d\u0430 \u043d\u0430 \u0441\u043b\u0435\u0434\u0443\u044e\u0449\u0438\u0435 \u0440\u0430\u0437\u0434\u0435\u043b\u044b: 1- \u041e\u0431\u0437\u043e\u0440 ELK SIEM 2- \u0414\u0430\u0448\u0431\u043e\u0440\u0434\u044b \u043f\u043e \u0443\u043c\u043e\u043b\u0447\u0430\u043d\u0438\u044e 3- \u0421\u043e\u0437\u0434\u0430\u043d\u0438\u0435 \u0432\u0430\u0448\u0438\u0445 \u043f\u0435\u0440\u0432\u044b\u0445 \u0434\u0430\u0448\u0431\u043e\u0440\u0434\u043e\u0432 \u041e\u0433\u043b\u0430\u0432\u043b\u0435\u043d\u0438\u0435 \u0432\u0441\u0435\u0445 \u043f\u043e\u0441\u0442\u043e\u0432. \u0412\u0432\u0435\u0434\u0435\u043d\u0438\u0435. \u0420\u0430\u0437\u0432\u0435\u0440\u0442\u044b\u0432\u0430\u043d\u0438\u0435 \u0438\u043d\u0444\u0440\u0430\u0441\u0442\u0440\u0443\u043a\u0442\u0443\u0440\u044b \u0438 \u0442\u0435\u0445\u043d\u043e\u043b\u043e\u0433\u0438\u0439 \u0434\u043b\u044f SOC \u043a\u0430\u043a Service (SOCasS) ELK stack \u2014 \u0443\u0441\u0442\u0430\u043d\u043e\u0432\u043a\u0430 \u0438 \u043d\u0430\u0441\u0442\u0440\u043e\u0439\u043a\u0430 \u041f\u0440\u043e\u0433\u0443\u043b\u043a\u0430 \u043f\u043e open Distro\" \/>\n\t\t<meta property=\"og:url\" content=\"https:\/\/prohoster.info\/sq\/blog\/administrirovanie\/elk-siem-open-distro-vizualizacziya-informaczionnyh-panelej-elk-i-siem-v-elk\" \/>\n\t\t<meta property=\"og:image\" content=\"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg\" \/>\n\t\t<meta property=\"og:image:secure_url\" content=\"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg\" \/>\n\t\t<meta property=\"og:image:width\" content=\"350\" \/>\n\t\t<meta property=\"og:image:height\" content=\"350\" \/>\n\t\t<meta property=\"article:published_time\" content=\"2020-08-22T17:42:03+00:00\" \/>\n\t\t<meta property=\"article:modified_time\" content=\"2020-08-22T17:42:03+00:00\" \/>\n\t\t<meta property=\"article:publisher\" content=\"https:\/\/www.facebook.com\/prohoster\" \/>\n\t\t<meta property=\"article:author\" content=\"https:\/\/www.facebook.com\/prohoster\" \/>\n\t\t<!-- All in One SEO -->\n\n","aioseo_head_json":{"title":"\ud83e\udd47ELK SIEM Open Distro: Vizualizimi i paneleve informuese ELK dhe SIEM n\u00eb ELK | ProHoster","description":"N\u00eb k\u00ebt\u00eb post do t\u00eb p\u00ebrshkruhet konfigurimi i vizualizimit t\u00eb paneleve informuese ELK dhe SIEM n\u00eb ELK. Artikulli \u00ebsht\u00eb i ndar\u00eb n\u00eb seksione t\u00eb m\u00ebposhtme: 1- P\u00ebrmbledhje e ELK SIEM 2- Panelet e paracaktuara 3- Krijimi i paneleve tuaj t\u00eb para. P\u00ebrmbajtja e t\u00eb gjith\u00ebve postimeve. Hyrje. Zbatuar infrastruktura dhe teknologjit\u00eb p\u00ebr SOC si Sh\u00ebrbim (SOCasS) ELK stack - instalimi dhe konfigurimi. Nj\u00eb sh\u00ebtitje n\u00eb open Distro","canonical_url":"https:\/\/prohoster.info\/sq\/blog\/administrirovanie\/elk-siem-open-distro-vizualizacziya-informaczionnyh-panelej-elk-i-siem-v-elk","robots":"max-image-preview:large","keywords":"","webmasterTools":{"miscellaneous":""},"schema":null,"og:locale":"sq_AL","og:site_name":"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b","og:type":"article","og:title":"\ud83e\udd47ELK SIEM Open Distro: \u0412\u0438\u0437\u0443\u0430\u043b\u0438\u0437\u0430\u0446\u0438\u044f \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u043e\u043d\u043d\u044b\u0445 \u043f\u0430\u043d\u0435\u043b\u0435\u0439 ELK \u0438 SIEM \u0432 ELK | ProHoster","og:description":"\u0412 \u044d\u0442\u043e\u043c \u043f\u043e\u0441\u0442\u0435 \u0431\u0443\u0434\u0435\u0442 \u043e\u043f\u0438\u0441\u0430\u043d\u0430 \u043d\u0430\u0441\u0442\u0440\u043e\u0439\u043a\u0430 \u0432\u0438\u0437\u0443\u0430\u043b\u0438\u0437\u0430\u0446\u0438\u0438 \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u043e\u043d\u043d\u044b\u0445 \u043f\u0430\u043d\u0435\u043b\u0435\u0439 ELK \u0438 SIEM \u0432 ELK \u0421\u0442\u0430\u0442\u044c\u044f \u0440\u0430\u0437\u0434\u0435\u043b\u0435\u043d\u0430 \u043d\u0430 \u0441\u043b\u0435\u0434\u0443\u044e\u0449\u0438\u0435 \u0440\u0430\u0437\u0434\u0435\u043b\u044b: 1- \u041e\u0431\u0437\u043e\u0440 ELK SIEM 2- \u0414\u0430\u0448\u0431\u043e\u0440\u0434\u044b \u043f\u043e \u0443\u043c\u043e\u043b\u0447\u0430\u043d\u0438\u044e 3- \u0421\u043e\u0437\u0434\u0430\u043d\u0438\u0435 \u0432\u0430\u0448\u0438\u0445 \u043f\u0435\u0440\u0432\u044b\u0445 \u0434\u0430\u0448\u0431\u043e\u0440\u0434\u043e\u0432 \u041e\u0433\u043b\u0430\u0432\u043b\u0435\u043d\u0438\u0435 \u0432\u0441\u0435\u0445 \u043f\u043e\u0441\u0442\u043e\u0432. \u0412\u0432\u0435\u0434\u0435\u043d\u0438\u0435. \u0420\u0430\u0437\u0432\u0435\u0440\u0442\u044b\u0432\u0430\u043d\u0438\u0435 \u0438\u043d\u0444\u0440\u0430\u0441\u0442\u0440\u0443\u043a\u0442\u0443\u0440\u044b \u0438 \u0442\u0435\u0445\u043d\u043e\u043b\u043e\u0433\u0438\u0439 \u0434\u043b\u044f SOC \u043a\u0430\u043a Service (SOCasS) ELK stack \u2014 \u0443\u0441\u0442\u0430\u043d\u043e\u0432\u043a\u0430 \u0438 \u043d\u0430\u0441\u0442\u0440\u043e\u0439\u043a\u0430 \u041f\u0440\u043e\u0433\u0443\u043b\u043a\u0430 \u043f\u043e open Distro","og:url":"https:\/\/prohoster.info\/sq\/blog\/administrirovanie\/elk-siem-open-distro-vizualizacziya-informaczionnyh-panelej-elk-i-siem-v-elk","og:image":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:secure_url":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:width":350,"og:image:height":350,"article:published_time":"2020-08-22T17:42:03+00:00","article:modified_time":"2020-08-22T17:42:03+00:00","article:publisher":"https:\/\/www.facebook.com\/prohoster","article:author":"https:\/\/www.facebook.com\/prohoster"},"aioseo_meta_data":{"post_id":"92075","title":null,"description":null,"keywords":null,"keyphrases":null,"primary_term":null,"canonical_url":null,"og_title":null,"og_description":null,"og_object_type":"default","og_image_type":"default","og_image_url":null,"og_image_width":null,"og_image_height":null,"og_image_custom_url":null,"og_image_custom_fields":null,"og_video":null,"og_custom_url":null,"og_article_section":null,"og_article_tags":null,"twitter_use_og":false,"twitter_card":"default","twitter_image_type":"default","twitter_image_url":null,"twitter_image_custom_url":null,"twitter_image_custom_fields":null,"twitter_title":null,"twitter_description":null,"schema":{"blockGraphs":[],"customGraphs":[],"default":{"data":{"Article":[],"Course":[],"Dataset":[],"FAQPage":[],"Movie":[],"Person":[],"Product":[],"ProductReview":[],"Car":[],"Recipe":[],"Service":[],"SoftwareApplication":[],"WebPage":[]},"graphName":"","isEnabled":true},"graphs":[]},"schema_type":null,"schema_type_options":null,"pillar_content":false,"robots_default":true,"robots_noindex":false,"robots_noarchive":false,"robots_nosnippet":false,"robots_nofollow":false,"robots_noimageindex":false,"robots_noodp":false,"robots_notranslate":false,"robots_max_snippet":null,"robots_max_videopreview":null,"robots_max_imagepreview":"large","priority":null,"frequency":null,"local_seo":null,"seo_analyzer_scan_date":null,"breadcrumb_settings":null,"limit_modified_date":false,"reviewed_by":null,"ai":null,"created":"2021-02-28 12:15:36","updated":"2022-09-27 16:41:20"},"gt_translate_keys":[{"key":"link","format":"url"}],"_links":{"self":[{"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/posts\/92075","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/comments?post=92075"}],"version-history":[{"count":0,"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/posts\/92075\/revisions"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/media\/92076"}],"wp:attachment":[{"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/media?parent=92075"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/categories?post=92075"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/tags?post=92075"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}