<div dir="auto"><div>You should be able to fire up Elastic, Logstash and Kibana on FreeBSD, using recommend Logstash configs to read in the log files from the file system. I can check about the Filebeat port to see if that can be updated or fixed.<div dir="auto"><br></div><div dir="auto">I myself just use the CLI tools but have been working on something "Not Java" to ingest log files into other than Splunk.<br><br><br><div data-smartmail="gmail_signature" dir="auto">--<br>Michael Shirk<br>Daemon Security, Inc.<br><a href="https://www.daemon-security.com">https://www.daemon-security.com</a></div></div><br><div class="gmail_quote"><div dir="ltr" class="gmail_attr">On Sun, Jan 5, 2020, 10:35 sec-x sec-x <<a href="mailto:center.mnt@gmail.com">center.mnt@gmail.com</a>> wrote:<br></div><blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex">Hi,<br>
<br>
I recently used zeek IDS on FreeBSD 12.1 - Default Policy (GetTraffic<br>
from TAP on the network) and i want to send all the logs to ELK in<br>
realtime.<br>
<br>
I saw Filebeat ports on BSD is old and has problems.<br>
<br>
How can i send the logs from the BSD to the Elastic (what is the<br>
correct/best way)?<br>
<br>
<br>
Thanks,<br>
<br>
CM.<br>
_______________________________________________<br>
Zeek mailing list<br>
<a href="mailto:zeek@zeek.org" target="_blank" rel="noreferrer">zeek@zeek.org</a><br>
<a href="http://mailman.ICSI.Berkeley.EDU/mailman/listinfo/zeek" rel="noreferrer noreferrer" target="_blank">http://mailman.ICSI.Berkeley.EDU/mailman/listinfo/zeek</a><br>
</blockquote></div></div></div>