You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
Copy file name to clipboardExpand all lines: packages/snort/_dev/build/docs/README.md
+4-12Lines changed: 4 additions & 12 deletions
Display the source diff
Display the rich diff
Original file line number
Diff line number
Diff line change
@@ -18,7 +18,7 @@ The following log formats are supported:
18
18
- Alert Fast output (from logfile or syslog)
19
19
- Snort 3 JSON log file
20
20
21
-
This integration is compatible with Elastic Stack versions `^8.11.0 || ^9.0.0`.
21
+
This integration is compatible with Elastic Stack versions 8.11.0 and higher.
22
22
23
23
### How it works
24
24
@@ -56,9 +56,7 @@ The Snort integration collects log messages containing information about network
56
56
57
57
Elastic Agent must be installed to collect logs and send them to the Elastic Stack. For more details, check the Elastic Agent [installation instructions](docs-content://reference/fleet/install-elastic-agents.md). You can install only one Elastic Agent per host.
58
58
59
-
### Onboard / configure
60
-
61
-
#### 1. Configure Snort
59
+
### Set up steps in Snort
62
60
63
61
1.**Install Snort**: If not already installed, download the latest version from the [official website](https://www.snort.org/) and follow the installation instructions for your operating system.
64
62
2.**Configure `snort.conf`**: Edit the `snort.conf` file to set network variables, define rule paths, and configure output plugins.
@@ -71,7 +69,7 @@ Elastic Agent must be installed to collect logs and send them to the Elastic Sta
71
69
```
72
70
5. **Start Snort**: Start Snort to begin monitoring network traffic.
73
71
74
-
#### 2. Configure the Elastic Integration
72
+
### Set up steps in Kibana
75
73
76
74
1. In Kibana, go to **Management > Integrations**.
77
75
2. Search for "Snort" and click on it.
@@ -101,9 +99,7 @@ For help with Elastic ingest tools, check [Common problems](https://www.elastic.
101
99
102
100
For more information, refer to the official [Snort Documentation](https://www.snort.org/documents).
103
101
104
-
## Scaling
105
-
106
-
For high-traffic environments, deploying Snort in a distributed architecture with multiple sensors can help balance the load and improve detection capabilities.
102
+
## Performance and scaling
107
103
108
104
For more information on architectures that can be used for scaling Elastic ingest, check the [Ingest Architectures](https://www.elastic.co/docs/manage-data/ingest/ingest-reference-architectures) documentation.
109
105
@@ -124,7 +120,3 @@ The `log` data stream collects all log types from Snort.
Copy file name to clipboardExpand all lines: packages/snort/docs/README.md
+4-12Lines changed: 4 additions & 12 deletions
Display the source diff
Display the rich diff
Original file line number
Diff line number
Diff line change
@@ -18,7 +18,7 @@ The following log formats are supported:
18
18
- Alert Fast output (from logfile or syslog)
19
19
- Snort 3 JSON log file
20
20
21
-
This integration is compatible with Elastic Stack versions `^8.11.0 || ^9.0.0`.
21
+
This integration is compatible with Elastic Stack versions 8.11.0 and higher.
22
22
23
23
### How it works
24
24
@@ -56,9 +56,7 @@ The Snort integration collects log messages containing information about network
56
56
57
57
Elastic Agent must be installed to collect logs and send them to the Elastic Stack. For more details, check the Elastic Agent [installation instructions](docs-content://reference/fleet/install-elastic-agents.md). You can install only one Elastic Agent per host.
58
58
59
-
### Onboard / configure
60
-
61
-
#### 1. Configure Snort
59
+
### Set up steps in Snort
62
60
63
61
1.**Install Snort**: If not already installed, download the latest version from the [official website](https://www.snort.org/) and follow the installation instructions for your operating system.
64
62
2.**Configure `snort.conf`**: Edit the `snort.conf` file to set network variables, define rule paths, and configure output plugins.
@@ -71,7 +69,7 @@ Elastic Agent must be installed to collect logs and send them to the Elastic Sta
71
69
```
72
70
5. **Start Snort**: Start Snort to begin monitoring network traffic.
73
71
74
-
#### 2. Configure the Elastic Integration
72
+
### Set up steps in Kibana
75
73
76
74
1. In Kibana, go to **Management > Integrations**.
77
75
2. Search for "Snort" and click on it.
@@ -101,9 +99,7 @@ For help with Elastic ingest tools, check [Common problems](https://www.elastic.
101
99
102
100
For more information, refer to the official [Snort Documentation](https://www.snort.org/documents).
103
101
104
-
## Scaling
105
-
106
-
For high-traffic environments, deploying Snort in a distributed architecture with multiple sensors can help balance the load and improve detection capabilities.
102
+
## Performance and scaling
107
103
108
104
For more information on architectures that can be used for scaling Elastic ingest, check the [Ingest Architectures](https://www.elastic.co/docs/manage-data/ingest/ingest-reference-architectures) documentation.
109
105
@@ -392,7 +388,3 @@ To collect logs via UDP, select **Collect logs via UDP** and configure the follo
392
388
- Read Timeout - How long to wait for incoming packets before checking for shutdown
0 commit comments