{"id":92075,"date":"2020-08-22T19:42:03","date_gmt":"2020-08-22T17:42:03","guid":{"rendered":"https:\/\/prohoster.info\/blog\/administrirovanie\/elk-siem-open-distro-vizualizacziya-informaczionnyh-panelej-elk-i-siem-v-elk"},"modified":"2020-08-22T19:42:03","modified_gmt":"2020-08-22T17:42:03","slug":"elk-siem-open-distro-vizualizacziya-informaczionnyh-panelej-elk-i-siem-v-elk","status":"publish","type":"post","link":"https:\/\/prohoster.info\/sq\/blog\/administrirovanie\/elk-siem-open-distro-vizualizacziya-informaczionnyh-panelej-elk-i-siem-v-elk","title":{"rendered":"ELK SIEM Open Distro: Vizualizimi i paneve t\u00eb informacionit ELK dhe SIEM n\u00eb ELK","gt_translate_keys":[{"key":"rendered","format":"text"}]},"content":{"rendered":"<p>Ky k\u00ebtij postimi do t\u00eb p\u00ebrshkruhet konfigurimi i vizualizimit t\u00eb paneleve informative ELK dhe SIEM n\u00eb ELK<br \/>\nArtikulli \u00ebsht\u00eb i ndar\u00eb n\u00eb seksionet e m\u00ebposhtme:<\/p>\n<p><\/p>\n<p>1- Pasqyr\u00eb mbi ELK SIEM<br \/>\n2- Panelet e paracaktuara<br \/>\n3- Krijimi i paneleve tuaja t\u00eb para<\/p>\n<p><noindex><a rel=\"nofollow\" name=\"habracut\"><\/a><\/noindex><\/p>\n<p>P\u00ebrmbajtja e t\u00eb gjitha postimeve.<\/p>\n<p><\/p>\n<ul>\n<li><noindex><a rel=\"nofollow\" href=\"https:\/\/habr.com\/ru\/post\/515576\/\">Hyrje. Zhvillimi i infrastruktur\u00ebs dhe teknologjive p\u00ebr SOC si Sh\u00ebrbim (SOCasS)<\/a><\/noindex><\/li>\n<li><noindex><a rel=\"nofollow\" href=\"https:\/\/habr.com\/ru\/post\/515722\/\">ELK stack \u2014 instalimi dhe konfigurimi<\/a><\/noindex><\/li>\n<li><noindex><a rel=\"nofollow\" href=\"https:\/\/habr.com\/ru\/post\/515920\/\">Sh\u00ebtitje n\u00eb open Distro<\/a><\/noindex><\/li>\n<li><noindex><a rel=\"nofollow\" href=\"https:\/\/habr.com\/ru\/post\/516050\/\">Vizualizimi i Paneleve dhe ELK SIEM<\/a><\/noindex><\/li>\n<li>Integrimi me WAZUH<\/li>\n<li>Njoftimi (Alerting)<\/li>\n<li>Raportimi<\/li>\n<li>Menaxhimi i rasteve<\/li>\n<\/ul>\n<p><\/p>\n<h3 id=\"1-obzor-elk-siem\">1- Pasqyr\u00eb mbi ELK SIEM<\/h3>\n<p><\/p>\n<p>ELK SIEM u shtua rishtazi n\u00eb stek ELK n\u00eb versionin 7.2 m\u00eb 25 qershor 2019.<\/p>\n<p><\/p>\n<p>Ky \u00ebsht\u00eb nj\u00eb zgjidhje SIEM, krijuar nga elastic.co, p\u00ebr t\u00eb b\u00ebr\u00eb jet\u00ebn e analistit t\u00eb siguris\u00eb shum\u00eb m\u00eb t\u00eb leht\u00eb dhe m\u00eb pak lodhshme.<\/p>\n<p><\/p>\n<p>N\u00eb versionin ton\u00eb t\u00eb pun\u00ebs, ne vendos\u00ebm t\u00eb krijojm\u00eb nj\u00eb SIEM t\u00eb vetin dhe t\u00eb zgjidhim nj\u00eb panel menaxhimi t\u00eb vetin.<\/p>\n<p><\/p>\n<p>Por ne e konsiderojm\u00eb t\u00eb r\u00ebnd\u00ebsishme fillimisht t\u00eb studiojm\u00eb ELK SIEM.<\/p>\n<p><\/p>\n<h4 id=\"11--razdel-host-events\">1.1- Seksioni i ngjarjeve t\u00eb hostit<\/h4>\n<p><\/p>\n<p>S\u00eb pari do t\u00eb shqyrtojm\u00eb seksionin e hostit. Seksioni i hostit do t'ju lejoj\u00eb t\u00eb shihni ngjarjet q\u00eb gjenerohen n\u00eb pik\u00ebn p\u00ebrfundimtare vet\u00eb.<\/p>\n<p><\/p>\n<p><img decoding=\"async\" alt=\"ELK SIEM Open Distro: Vizualizimi i paneve t\u00eb informacionit ELK dhe SIEM n\u00eb ELK\" src=\"\/wp-content\/uploads\/2020\/08\/54ebe976e6479930ca8d20cfacdc0d8d.png\" style=\"display:block;margin: 0 auto;\" \/><\/p>\n<p><\/p>\n<p><img decoding=\"async\" alt=\"ELK SIEM Open Distro: Vizualizimi i paneve t\u00eb informacionit ELK dhe SIEM n\u00eb ELK\" src=\"\/wp-content\/uploads\/2020\/08\/e0862fafaa4ad1ba34714339a33c698f.png\" style=\"display:block;margin: 0 auto;\" \/><\/p>\n<p><\/p>\n<p>Pasi t\u00eb klikoni p\u00ebr t\u00eb par\u00eb hostet, duhet t\u00eb merrni di\u00e7ka t\u00eb till\u00eb. Si\u00e7 e shihni, ky kompjuter ka tre hoste t\u00eb lidhur:<\/p>\n<p><\/p>\n<p>1 Windows 10.<\/p>\n<p><\/p>\n<p>2 Server Ubuntu 18.04.<\/p>\n<p><\/p>\n<p>Ne kemi disa vizualizime t\u00eb shfaqura, secila prej t\u00eb cilave paraqet lloje t\u00eb ndryshme ngjarjesh.<\/p>\n<p><\/p>\n<p>P\u00ebr shembull, ajo q\u00eb \u00ebsht\u00eb n\u00eb mes tregon t\u00eb dh\u00ebnat e identifikimit n\u00eb t\u00eb tre makinat.<\/p>\n<p><\/p>\n<p>Ky volum t\u00eb dh\u00ebnash q\u00eb shihni k\u00ebtu \u00ebsht\u00eb mbledhur p\u00ebr pes\u00eb dit\u00eb. Kjo shpjegon numrin e madh t\u00eb hyrjeve t\u00eb pasuksesshme dhe t\u00eb suksesshme. Ju ndoshta do t\u00eb keni nj\u00eb num\u00ebr t\u00eb vog\u00ebl t\u00eb regjistrimeve, k\u00ebshtu q\u00eb mos u shqet\u00ebsoni<\/p>\n<p><\/p>\n<h4 id=\"12--razdel-setevyh-sobytiy\">1.2- Seksioni i ngjarjeve rrjet<\/h4>\n<p><\/p>\n<p>Duke kaluar n\u00eb seksionin e rrjetit, duhet t\u00eb merrni di\u00e7ka t\u00eb till\u00eb. Ky seksion do t'ju lejoj\u00eb t\u00eb monitoroni me kujdes gjith\u00e7ka q\u00eb ndodh n\u00eb rrjetin tuaj, nga trafiku HTTP \/ TLS deri te trafiku DNS dhe njoftimet e jashtme p\u00ebr ngjarje.<\/p>\n<p><\/p>\n<p><img decoding=\"async\" alt=\"ELK SIEM Open Distro: Vizualizimi i paneve t\u00eb informacionit ELK dhe SIEM n\u00eb ELK\" src=\"\/wp-content\/uploads\/2020\/08\/3ebae3d5e85dd84556eb26901c2fd519.png\" style=\"display:block;margin: 0 auto;\" \/><\/p>\n<p><\/p>\n<p><img decoding=\"async\" alt=\"ELK SIEM Open Distro: Vizualizimi i paneve t\u00eb informacionit ELK dhe SIEM n\u00eb ELK\" src=\"\/wp-content\/uploads\/2020\/08\/344db7fac06acabaa011657debb52993.png\" style=\"display:block;margin: 0 auto;\" \/><\/p>\n<p><\/p>\n<h3 id=\"2--dashbordy-po-umolchaniyu\">2- Panelet e paracaktuara<\/h3>\n<p><\/p>\n<p>P\u00ebr t\u00eb leht\u00ebsuar jet\u00ebn e p\u00ebrdoruesve, zhvilluesit e elastic.co krijuan nj\u00eb panel t\u00eb paracaktuar, t\u00eb mb\u00ebshtetur zyrtarisht nga ELK. Bit\u00ebt tan\u00eb nuk ishin p\u00ebrjashtim nga ky rregull. K\u00ebtu do t\u00eb marr si shembull panelin e monitorimit Packetbeat t\u00eb paracaktuar.<\/p>\n<p><\/p>\n<p>N\u00ebse keni p\u00ebrfunduar si\u00e7 duhet hapat e disertacionit t\u00eb dyt\u00eb. Duhet t\u00eb keni nj\u00eb panel q\u00eb ju pret. Le t\u00eb fillojm\u00eb.<\/p>\n<p><\/p>\n<p>N\u00eb skedarin e majt\u00eb t\u00eb Kibana, zgjidhni simbolin e panelit. Ky \u00ebsht\u00eb i treti, n\u00ebse i num\u00ebroni nga lart.<\/p>\n<p><\/p>\n<p>Shkruani emrin e pjes\u00ebs n\u00eb tabin e k\u00ebrkimit<\/p>\n<p><\/p>\n<p>N\u00ebse ka disa module n\u00eb bit, do t\u00eb krijohet nj\u00eb panel kontrolli p\u00ebr \u00e7do nj\u00eb prej tyre. Por vet\u00ebm ai, ku moduli \u00ebsht\u00eb i aktivizuar, do t\u00eb shfaq\u00eb t\u00eb dh\u00ebna t\u00eb plota.<\/p>\n<p><\/p>\n<p>Zgjidhni at\u00eb, q\u00eb ka emrin e modulit tuaj.<\/p>\n<p><\/p>\n<p>Ky \u00ebsht\u00eb modeli kryesor <strong>PacketBeat<\/strong>.<\/p>\n<p><\/p>\n<p><img decoding=\"async\" alt=\"ELK SIEM Open Distro: Vizualizimi i paneve t\u00eb informacionit ELK dhe SIEM n\u00eb ELK\" src=\"\/wp-content\/uploads\/2020\/08\/f895c527f746c6df4c7e4e43c4eee802.png\" style=\"display:block;margin: 0 auto;\" \/><\/p>\n<p><\/p>\n<p>Ky \u00ebsht\u00eb paneli i menaxhimit t\u00eb trafikjeve rrjet\u00ebsh. Ai do t\u00eb na informoj\u00eb p\u00ebr paketat hyrese dhe dal\u00ebse, burimet dhe destinacionet e adresave IP, si dhe do t\u00eb ofroj\u00eb shum\u00eb informacione t\u00eb dobishme p\u00ebr analistin e qendr\u00ebs s\u00eb siguris\u00eb.<\/p>\n<p><\/p>\n<p><img decoding=\"async\" alt=\"ELK SIEM Open Distro: Vizualizimi i paneve t\u00eb informacionit ELK dhe SIEM n\u00eb ELK\" src=\"\/wp-content\/uploads\/2020\/08\/1d319ebf0865ea4ad18c9f1a10d6182d.png\" style=\"display:block;margin: 0 auto;\" \/><\/p>\n<p><\/p>\n<p><img decoding=\"async\" alt=\"ELK SIEM Open Distro: Vizualizimi i paneve t\u00eb informacionit ELK dhe SIEM n\u00eb ELK\" src=\"\/wp-content\/uploads\/2020\/08\/fb4f7078d667bc3c402198c2c58c293d.png\" style=\"display:block;margin: 0 auto;\" \/><\/p>\n<p><\/p>\n<h3 id=\"3---sozdanie-vashih-pervyh-dashbordov\">3 \u2014 Krijimi i paneleve tuaja t\u00eb para<\/h3>\n<p><\/p>\n<h4 id=\"31--osnovnye-ponyatiya\">3\u20131- Konceptet kryesore<\/h4>\n<p><\/p>\n<p><strong>A- Llojet e paneleve:<\/strong><\/p>\n<p><\/p>\n<p>K\u00ebto jan\u00eb lloje t\u00eb ndryshme vizualizimesh q\u00eb mund t\u00eb p\u00ebrdorni p\u00ebr t\u00eb vizualizuar t\u00eb dh\u00ebnat tuaja.<\/p>\n<p><\/p>\n<p>p\u00ebr shembull, ne kemi:<\/p>\n<p><\/p>\n<ul>\n<li>Histogrami<\/li>\n<li>Harta<\/li>\n<li>Widget Markdown<\/li>\n<li>Grafiku me rreth<\/li>\n<\/ul>\n<p><\/p>\n<p><img decoding=\"async\" alt=\"ELK SIEM Open Distro: Vizualizimi i paneve t\u00eb informacionit ELK dhe SIEM n\u00eb ELK\" src=\"\/wp-content\/uploads\/2020\/08\/63a8cbb26fe1caa4c224fffca02a58ad.png\" style=\"display:block;margin: 0 auto;\" \/><\/p>\n<p><\/p>\n<p><strong>B- KQL (Gjuha e K\u00ebrkesave Kibana):<\/strong><\/p>\n<p><\/p>\n<p>Kjo \u00ebsht\u00eb gjuha e p\u00ebrdorur n\u00eb Kibana p\u00ebr k\u00ebrkimin e leht\u00eb n\u00eb t\u00eb dh\u00ebna. Ajo ju lejon t\u00eb kontrolloni n\u00ebse ekzistojn\u00eb t\u00eb dh\u00ebna t\u00eb caktuara dhe shum\u00eb funksione t\u00eb tjera t\u00eb dobishme. P\u00ebr t\u00eb m\u00ebsuar m\u00eb shum\u00eb, mund t\u00eb studioni informacionin n\u00eb k\u00ebt\u00eb lidhje<\/p>\n<p><\/p>\n<p><noindex><a rel=\"nofollow\" href=\"https:\/\/www.elastic.co\/guide\/en\/kibana\/current\/kuery-query.html\">https:\/\/www.elastic.co\/guide\/en\/kibana\/current\/kuery-query.html<\/a><\/noindex><\/p>\n<p><\/p>\n<p>Ky \u00ebsht\u00eb nj\u00eb shembull i nj\u00eb k\u00ebrkese p\u00ebr t\u00eb k\u00ebrkuar nj\u00eb host me sistemin Windows 10 pro.<\/p>\n<p><\/p>\n<p><img decoding=\"async\" alt=\"ELK SIEM Open Distro: Vizualizimi i paneve t\u00eb informacionit ELK dhe SIEM n\u00eb ELK\" src=\"\/wp-content\/uploads\/2020\/08\/2785f9afe1dfe463ad6b56febcfa04b8.png\" style=\"display:block;margin: 0 auto;\" \/><\/p>\n<p><\/p>\n<p><strong>C- Filtrat:<\/strong><\/p>\n<p><\/p>\n<p>Kjo funksion do t'ju lejoj\u00eb t\u00eb filtroni disa parametra t\u00eb caktuar, si emrin e hostit, kodin ose identifikuesin e ngjarjes etj. Filtrat do ta p\u00ebrmir\u00ebsojn\u00eb ndjesh\u00ebm faz\u00ebn e hetimit n\u00eb aspektin e koh\u00ebs dhe p\u00ebrpjekjeve q\u00eb shpenzohen p\u00ebr t\u00eb k\u00ebrkuar prova.<\/p>\n<p><\/p>\n<p><strong>D- Vizualizimi i par\u00eb:<\/strong><\/p>\n<p><\/p>\n<p>Do t\u00eb krijojm\u00eb nj\u00eb vizualizim p\u00ebr MITER ATT &amp; CK.<\/p>\n<p><\/p>\n<p>S\u00eb pari, na nevojitet t\u00eb shkojm\u00eb n\u00eb <strong>Dashboard \u2192 Krijo panel t\u00eb ri \u2192 krijo t\u00eb re \u2192 Grafiku me rreth<\/strong><\/p>\n<p><\/p>\n<p>Caktoni tipin p\u00ebr modelin e indeksit, pastaj prekni emrin e bitit tuaj.<\/p>\n<p><\/p>\n<p>Shtypni Enter. N\u00eb k\u00ebt\u00eb moment, duhet t\u00eb shihni nj\u00eb donut t\u00eb gjelb\u00ebr.<\/p>\n<p><\/p>\n<p>N\u00eb tabin Buckets n\u00eb t\u00eb majt\u00eb do t\u00eb gjeni:<\/p>\n<p><\/p>\n<p><img decoding=\"async\" alt=\"ELK SIEM Open Distro: Vizualizimi i paneve t\u00eb informacionit ELK dhe SIEM n\u00eb ELK\" src=\"\/wp-content\/uploads\/2020\/08\/432dd674f142ee33b4e248621638b9e8.png\" style=\"display:block;margin: 0 auto;\" \/><\/p>\n<p><\/p>\n<p> \u2014 Split slices do t\u00eb ndante donut-in n\u00eb pjes\u00eb t\u00eb ndryshme n\u00eb var\u00ebsi t\u00eb shp\u00ebrndarjes s\u00eb t\u00eb dh\u00ebnave.<\/p>\n<p><\/p>\n<p> \u2014 Split Chart do t\u00eb krijoj\u00eb nj\u00eb donut tjet\u00ebr p\u00ebrkrah k\u00ebtij. <\/p>\n<p><\/p>\n<p>Ne do t\u00eb p\u00ebrdorim ndarjet e ndara.<\/p>\n<p><\/p>\n<p>Ne do t\u00eb vizualizojm\u00eb t\u00eb dh\u00ebnat tona n\u00eb var\u00ebsi t\u00eb termit q\u00eb kemi zgjedhur. N\u00eb k\u00ebt\u00eb rast, termini do t\u00eb lidhet me MITER ATT &amp; CK.<\/p>\n<p><\/p>\n<p>N\u00eb Winlogbeat, fusha q\u00eb do t\u00eb na ofroj\u00eb k\u00ebt\u00eb informacion quhet:<\/p>\n<p><\/p>\n<pre><code class=\"plaintext\">winlog.event_data.RuleName<\/code><\/pre>\n<p><\/p>\n<p><strong>Do t\u00eb caktojm\u00eb matjen e num\u00ebrimit p\u00ebr t\u00eb renditur ngjarjet n\u00eb var\u00ebsi t\u00eb numrit t\u00eb shfaqjeve t\u00eb tyre.<\/strong><\/p>\n<p><\/p>\n<p>Aktivizoni funksionin \"Gruponi vlerat e tjera n\u00eb nj\u00eb segment t\u00eb ve\u00e7ant\u00eb.\"<\/p>\n<p><\/p>\n<p>Kjo do t\u00eb jet\u00eb e dobishme n\u00ebse termat q\u00eb keni zgjedhur kan\u00eb shum\u00eb kuptime t\u00eb ndryshme q\u00eb rrjedhin nga ritmi. Kjo ndihmon n\u00eb vizualizimin e t\u00eb dh\u00ebnave t\u00eb tjera si nj\u00eb e t\u00ebr\u00eb. Kjo do t'ju jap\u00eb nj\u00eb pasqyr\u00eb t\u00eb p\u00ebrqindjes s\u00eb ngjarjeve t\u00eb tjera.<\/p>\n<p><\/p>\n<p>Tani q\u00eb kemi p\u00ebrfunduar konfigurimin e sked\u00ebs s\u00eb t\u00eb dh\u00ebnave, le t\u00eb kalojm\u00eb te skeda e parametrave<\/p>\n<p><\/p>\n<p>Duhet t\u00eb b\u00ebni si vijon:<\/p>\n<p><\/p>\n<p>** Shtoni form\u00ebn e donut-it, q\u00eb t\u00eb shfaqet nj\u00eb rreth i plot\u00eb n\u00eb vizualizim.<\/p>\n<p><\/p>\n<p>** Zgjidhni pozicionin e legjend\u00ebs q\u00eb ju p\u00eblqen. N\u00eb k\u00ebt\u00eb rast, do t'i shfaqim ata n\u00eb an\u00ebn e djatht\u00eb.<\/p>\n<p><\/p>\n<p>** Rregulloni vlerat e shfaqjes q\u00eb t\u00eb shfaqen af\u00ebr fragmentit t\u00eb tyre p\u00ebr leht\u00ebsi leximi, nd\u00ebrsa t\u00eb tjerat l\u00ebni n\u00ebn parametra t\u00eb paracaktuar<\/p>\n<p><\/p>\n<p><img decoding=\"async\" alt=\"ELK SIEM Open Distro: Vizualizimi i paneve t\u00eb informacionit ELK dhe SIEM n\u00eb ELK\" src=\"\/wp-content\/uploads\/2020\/08\/9b2e230247a5277c198f196e96e5f6da.png\" style=\"display:block;margin: 0 auto;\" \/><\/p>\n<p><\/p>\n<p><strong>Prerja p\u00ebrcakton se sa d\u00ebshironi t\u00eb shfaqni nga emri i ngjarjes.<\/strong><\/p>\n<p><\/p>\n<p>Vendosni koh\u00ebn e fillimit t\u00eb vizualizimit dhe pastaj klikoni n\u00eb katrorin blu.<\/p>\n<p><\/p>\n<p>Ju duhet t\u00eb keni di\u00e7ka t\u00eb till\u00eb:<\/p>\n<p><\/p>\n<p><img decoding=\"async\" alt=\"ELK SIEM Open Distro: Vizualizimi i paneve t\u00eb informacionit ELK dhe SIEM n\u00eb ELK\" src=\"\/wp-content\/uploads\/2020\/08\/b89f5bf6aee38ff9019540b5f72b6c4c.png\" style=\"display:block;margin: 0 auto;\" \/><\/p>\n<p><\/p>\n<p>Ju gjithashtu mund t\u00eb shtoni nj\u00eb filtrin n\u00eb vizualizimin tuaj p\u00ebr t\u00eb filtruar nj\u00eb host t\u00eb caktuar q\u00eb d\u00ebshironi t\u00eb kontrolloni, ose \u00e7do parametrash q\u00eb mendoni se jan\u00eb t\u00eb dobish\u00ebm p\u00ebr q\u00ebllimin tuaj. Vizualizimi do t\u00eb shfaq\u00eb vet\u00ebm t\u00eb dh\u00ebnat q\u00eb i p\u00ebrkasin rregullit t\u00eb futur n\u00eb filtrin. N\u00eb k\u00ebt\u00eb rast, do t\u00eb shfaqim t\u00eb dh\u00ebnat MITER ATT &amp; CK, q\u00eb vijn\u00eb vet\u00ebm nga host-i me emrin win10.<\/p>\n<p><\/p>\n<p><img decoding=\"async\" alt=\"ELK SIEM Open Distro: Vizualizimi i paneve t\u00eb informacionit ELK dhe SIEM n\u00eb ELK\" src=\"\/wp-content\/uploads\/2020\/08\/aa6b4716d7e2cd27c9cc6b1a4acb25ae.png\" style=\"display:block;margin: 0 auto;\" \/><\/p>\n<p><\/p>\n<h4 id=\"32--sozdanie-vashey-pervoy-informacionnoy-paneli\">3\u20132- Krijimi i panelit tuaj t\u00eb par\u00eb:<\/h4>\n<p><\/p>\n<p>Panairi i monitorimit \u00ebsht\u00eb nj\u00eb grup vizualizimesh t\u00eb shumta. Paneli juaj duhet t\u00eb jet\u00eb i qart\u00eb, i kuptuesh\u00ebm dhe t\u00eb p\u00ebrmbaj\u00eb t\u00eb dh\u00ebna t\u00eb dobishme dhe t\u00eb p\u00ebrcaktuara. Ja nj\u00eb shembull i paneleve q\u00eb krijuam nga zero p\u00ebr winlogbeat.<\/p>\n<p><\/p>\n<p><img decoding=\"async\" alt=\"ELK SIEM Open Distro: Vizualizimi i paneve t\u00eb informacionit ELK dhe SIEM n\u00eb ELK\" src=\"\/wp-content\/uploads\/2020\/08\/d2da07c7fce7a96fa754c709bdedb8a0.png\" style=\"display:block;margin: 0 auto;\" \/><\/p>\n<p><\/p>\n<p>Faleminderit p\u00ebr koh\u00ebn tuaj. Shpresoj q\u00eb ky artikull ishte i dobish\u00ebm p\u00ebr ju. N\u00ebse d\u00ebshironi t\u00eb merrni m\u00eb shum\u00eb informacion mbi tem\u00ebn, ju rekomandojm\u00eb t\u00eb vizitoni <noindex><a rel=\"nofollow\" href=\"https:\/\/www.elastic.co\/guide\/en\/kibana\/current\/tutorial-visualizing.html\">faqja zyrtare<\/a><\/noindex>.<\/p>\n<p><\/p>\n<p>Biseda n\u00eb Telegram p\u00ebr Elasticsearch: <noindex><a rel=\"nofollow\" href=\"https:\/\/t.me\/elasticsearch_ru\">https:\/\/t.me\/elasticsearch_ru<\/a><\/noindex><\/p>\n<p>Burimi: <a content=\"nofollow\" rel=\"nofollow\" href=\"https:\/\/habr.com\/ru\/post\/516050\/\">habr.com<\/a> <\/p>","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"excerpt":{"rendered":"<p>\u0412 \u044d\u0442\u043e\u043c \u043f\u043e\u0441\u0442\u0435 \u0431\u0443\u0434\u0435\u0442 \u043e\u043f\u0438\u0441\u0430\u043d\u0430 \u043d\u0430\u0441\u0442\u0440\u043e\u0439\u043a\u0430 \u0432\u0438\u0437\u0443\u0430\u043b\u0438\u0437\u0430\u0446\u0438\u0438 \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u043e\u043d\u043d\u044b\u0445 \u043f\u0430\u043d\u0435\u043b\u0435\u0439 ELK \u0438 SIEM \u0432 ELK \u0421\u0442\u0430\u0442\u044c\u044f \u0440\u0430\u0437\u0434\u0435\u043b\u0435\u043d\u0430 \u043d\u0430 \u0441\u043b\u0435\u0434\u0443\u044e\u0449\u0438\u0435 \u0440\u0430\u0437\u0434\u0435\u043b\u044b: 1- \u041e\u0431\u0437\u043e\u0440 ELK SIEM 2- \u0414\u0430\u0448\u0431\u043e\u0440\u0434\u044b \u043f\u043e \u0443\u043c\u043e\u043b\u0447\u0430\u043d\u0438\u044e 3- \u0421\u043e\u0437\u0434\u0430\u043d\u0438\u0435 \u0432\u0430\u0448\u0438\u0445 \u043f\u0435\u0440\u0432\u044b\u0445 \u0434\u0430\u0448\u0431\u043e\u0440\u0434\u043e\u0432 \u041e\u0433\u043b\u0430\u0432\u043b\u0435\u043d\u0438\u0435 \u0432\u0441\u0435\u0445 \u043f\u043e\u0441\u0442\u043e\u0432. \u0412\u0432\u0435\u0434\u0435\u043d\u0438\u0435. \u0420\u0430\u0437\u0432\u0435\u0440\u0442\u044b\u0432\u0430\u043d\u0438\u0435 \u0438\u043d\u0444\u0440\u0430\u0441\u0442\u0440\u0443\u043a\u0442\u0443\u0440\u044b \u0438 \u0442\u0435\u0445\u043d\u043e\u043b\u043e\u0433\u0438\u0439 \u0434\u043b\u044f SOC \u043a\u0430\u043a Service (SOCasS) ELK stack \u2014 \u0443\u0441\u0442\u0430\u043d\u043e\u0432\u043a\u0430 \u0438 \u043d\u0430\u0441\u0442\u0440\u043e\u0439\u043a\u0430 \u041f\u0440\u043e\u0433\u0443\u043b\u043a\u0430 \u043f\u043e open Distro [&hellip;]<\/p>\n","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"author":1,"featured_media":92076,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[688],"tags":[],"class_list":["post-92075","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-administrirovanie"],"aioseo_notices":[],"aioseo_head":"\n\t\t<!-- All in One SEO 5.0.2 - aioseo.com -->\n\t<meta name=\"description\" content=\"\u0412 \u044d\u0442\u043e\u043c \u043f\u043e\u0441\u0442\u0435 \u0431\u0443\u0434\u0435\u0442 \u043e\u043f\u0438\u0441\u0430\u043d\u0430 \u043d\u0430\u0441\u0442\u0440\u043e\u0439\u043a\u0430 \u0432\u0438\u0437\u0443\u0430\u043b\u0438\u0437\u0430\u0446\u0438\u0438 \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u043e\u043d\u043d\u044b\u0445 \u043f\u0430\u043d\u0435\u043b\u0435\u0439 ELK \u0438 SIEM \u0432 ELK \u0421\u0442\u0430\u0442\u044c\u044f \u0440\u0430\u0437\u0434\u0435\u043b\u0435\u043d\u0430 \u043d\u0430 \u0441\u043b\u0435\u0434\u0443\u044e\u0449\u0438\u0435 \u0440\u0430\u0437\u0434\u0435\u043b\u044b: 1- \u041e\u0431\u0437\u043e\u0440 ELK SIEM 2- \u0414\u0430\u0448\u0431\u043e\u0440\u0434\u044b \u043f\u043e \u0443\u043c\u043e\u043b\u0447\u0430\u043d\u0438\u044e 3- \u0421\u043e\u0437\u0434\u0430\u043d\u0438\u0435 \u0432\u0430\u0448\u0438\u0445.\" \/>\n\t<meta name=\"robots\" content=\"max-image-preview:large\" \/>\n\t<meta name=\"author\" content=\"Yuri Gagarin\"\/>\n\t<link rel=\"canonical\" href=\"https:\/\/prohoster.info\/sq\/blog\/administrirovanie\/elk-siem-open-distro-vizualizacziya-informaczionnyh-panelej-elk-i-siem-v-elk\" \/>\n\t<meta name=\"generator\" content=\"All in One SEO (AIOSEO) 5.0.2\" \/>\n\t\t<meta property=\"og:locale\" content=\"sq_AL\" \/>\n\t\t<meta property=\"og:site_name\" content=\"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b\" \/>\n\t\t<meta property=\"og:type\" content=\"article\" \/>\n\t\t<meta property=\"og:title\" content=\"\ud83e\udd47ELK SIEM Open Distro: \u0412\u0438\u0437\u0443\u0430\u043b\u0438\u0437\u0430\u0446\u0438\u044f \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u043e\u043d\u043d\u044b\u0445 \u043f\u0430\u043d\u0435\u043b\u0435\u0439 ELK \u0438 SIEM \u0432 ELK | ProHoster\" \/>\n\t\t<meta property=\"og:description\" content=\"\u0412 \u044d\u0442\u043e\u043c \u043f\u043e\u0441\u0442\u0435 \u0431\u0443\u0434\u0435\u0442 \u043e\u043f\u0438\u0441\u0430\u043d\u0430 \u043d\u0430\u0441\u0442\u0440\u043e\u0439\u043a\u0430 \u0432\u0438\u0437\u0443\u0430\u043b\u0438\u0437\u0430\u0446\u0438\u0438 \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u043e\u043d\u043d\u044b\u0445 \u043f\u0430\u043d\u0435\u043b\u0435\u0439 ELK \u0438 SIEM \u0432 ELK \u0421\u0442\u0430\u0442\u044c\u044f \u0440\u0430\u0437\u0434\u0435\u043b\u0435\u043d\u0430 \u043d\u0430 \u0441\u043b\u0435\u0434\u0443\u044e\u0449\u0438\u0435 \u0440\u0430\u0437\u0434\u0435\u043b\u044b: 1- \u041e\u0431\u0437\u043e\u0440 ELK SIEM 2- \u0414\u0430\u0448\u0431\u043e\u0440\u0434\u044b \u043f\u043e \u0443\u043c\u043e\u043b\u0447\u0430\u043d\u0438\u044e 3- \u0421\u043e\u0437\u0434\u0430\u043d\u0438\u0435 \u0432\u0430\u0448\u0438\u0445.\" \/>\n\t\t<meta property=\"og:url\" content=\"https:\/\/prohoster.info\/sq\/blog\/administrirovanie\/elk-siem-open-distro-vizualizacziya-informaczionnyh-panelej-elk-i-siem-v-elk\" \/>\n\t\t<meta property=\"og:image\" content=\"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg\" \/>\n\t\t<meta property=\"og:image:secure_url\" content=\"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg\" \/>\n\t\t<meta property=\"og:image:width\" content=\"350\" \/>\n\t\t<meta property=\"og:image:height\" content=\"350\" \/>\n\t\t<meta property=\"article:published_time\" content=\"2020-08-22T17:42:03+00:00\" \/>\n\t\t<meta property=\"article:modified_time\" content=\"2020-08-22T17:42:03+00:00\" \/>\n\t\t<meta property=\"article:publisher\" content=\"https:\/\/www.facebook.com\/prohoster\" \/>\n\t\t<meta property=\"article:author\" content=\"https:\/\/www.facebook.com\/prohoster\" \/>\n\t\t<!-- All in One SEO -->\n\n","aioseo_head_json":{"title":"\ud83e\udd47ELK SIEM Open Distro: Vizualizimi i paneleve ELK dhe SIEM n\u00eb ELK | ProHoster","description":"Ky post do t\u00eb p\u00ebrshkruaj\u00eb konfigurimin e vizualizimit t\u00eb paneleve ELK dhe SIEM n\u00eb ELK. Artikulli \u00ebsht\u00eb i ndar\u00eb n\u00eb seksione si n\u00eb vijim: 1- P\u00ebrshtypja mbi ELK SIEM 2- Panelet e paracaktuara 3- Krijimi i tuaj.","canonical_url":"https:\/\/prohoster.info\/sq\/blog\/administrirovanie\/elk-siem-open-distro-vizualizacziya-informaczionnyh-panelej-elk-i-siem-v-elk","robots":"max-image-preview:large","keywords":"","webmasterTools":{"miscellaneous":""},"schema":null,"og:locale":"sq_AL","og:site_name":"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b","og:type":"article","og:title":"\ud83e\udd47ELK SIEM Open Distro: \u0412\u0438\u0437\u0443\u0430\u043b\u0438\u0437\u0430\u0446\u0438\u044f \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u043e\u043d\u043d\u044b\u0445 \u043f\u0430\u043d\u0435\u043b\u0435\u0439 ELK \u0438 SIEM \u0432 ELK | ProHoster","og:description":"\u0412 \u044d\u0442\u043e\u043c \u043f\u043e\u0441\u0442\u0435 \u0431\u0443\u0434\u0435\u0442 \u043e\u043f\u0438\u0441\u0430\u043d\u0430 \u043d\u0430\u0441\u0442\u0440\u043e\u0439\u043a\u0430 \u0432\u0438\u0437\u0443\u0430\u043b\u0438\u0437\u0430\u0446\u0438\u0438 \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u043e\u043d\u043d\u044b\u0445 \u043f\u0430\u043d\u0435\u043b\u0435\u0439 ELK \u0438 SIEM \u0432 ELK \u0421\u0442\u0430\u0442\u044c\u044f \u0440\u0430\u0437\u0434\u0435\u043b\u0435\u043d\u0430 \u043d\u0430 \u0441\u043b\u0435\u0434\u0443\u044e\u0449\u0438\u0435 \u0440\u0430\u0437\u0434\u0435\u043b\u044b: 1- \u041e\u0431\u0437\u043e\u0440 ELK SIEM 2- \u0414\u0430\u0448\u0431\u043e\u0440\u0434\u044b \u043f\u043e \u0443\u043c\u043e\u043b\u0447\u0430\u043d\u0438\u044e 3- \u0421\u043e\u0437\u0434\u0430\u043d\u0438\u0435 \u0432\u0430\u0448\u0438\u0445.","og:url":"https:\/\/prohoster.info\/sq\/blog\/administrirovanie\/elk-siem-open-distro-vizualizacziya-informaczionnyh-panelej-elk-i-siem-v-elk","og:image":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:secure_url":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:width":350,"og:image:height":350,"article:published_time":"2020-08-22T17:42:03+00:00","article:modified_time":"2020-08-22T17:42:03+00:00","article:publisher":"https:\/\/www.facebook.com\/prohoster","article:author":"https:\/\/www.facebook.com\/prohoster"},"aioseo_meta_data":{"post_id":"92075","title":null,"description":null,"keywords":null,"keyphrases":null,"primary_term":null,"canonical_url":null,"og_title":null,"og_description":null,"og_object_type":"default","og_image_type":"default","og_image_url":null,"og_image_width":null,"og_image_height":null,"og_image_custom_url":null,"og_image_custom_fields":null,"og_video":null,"og_custom_url":null,"og_article_section":null,"og_article_tags":null,"twitter_use_og":false,"twitter_card":"default","twitter_image_type":"default","twitter_image_url":null,"twitter_image_custom_url":null,"twitter_image_custom_fields":null,"twitter_title":null,"twitter_description":null,"schema":{"blockGraphs":[],"customGraphs":[],"default":{"data":{"Article":[],"Course":[],"Dataset":[],"FAQPage":[],"Movie":[],"Person":[],"Product":[],"ProductReview":[],"Car":[],"Recipe":[],"Service":[],"SoftwareApplication":[],"WebPage":[]},"graphName":"","isEnabled":true},"graphs":[]},"schema_type":null,"schema_type_options":null,"pillar_content":false,"robots_default":true,"robots_noindex":false,"robots_noarchive":false,"robots_nosnippet":false,"robots_nofollow":false,"robots_noimageindex":false,"robots_noodp":false,"robots_notranslate":false,"robots_max_snippet":null,"robots_max_videopreview":null,"robots_max_imagepreview":"large","priority":null,"frequency":null,"local_seo":null,"seo_analyzer_scan_date":null,"breadcrumb_settings":null,"limit_modified_date":false,"reviewed_by":null,"ai":null,"created":"2021-02-28 12:15:36","updated":"2022-09-27 16:41:20","focus_keyword":null,"additional_keywords":null,"truseo_locale":null},"gt_translate_keys":[{"key":"link","format":"url"}],"_links":{"self":[{"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/posts\/92075","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/comments?post=92075"}],"version-history":[{"count":0,"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/posts\/92075\/revisions"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/media\/92076"}],"wp:attachment":[{"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/media?parent=92075"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/categories?post=92075"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/tags?post=92075"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}