[Bro] Bro -> Elasticsearch -> Kibana4beta -> GeoLocation

Daniel Guerra daniel.guerra69 at gmail.com
Wed Oct 28 02:35:12 PDT 2015


Hi All,

I want to use locations in kibana. The problem is control
over the json output. I don’t know if bro can produce complex
json structures.
Elasticsearch needs a structure like this
coordinate: {lat:53.00,long:4.00} 
but bro uses an output like
coordinate.lat:53.00,coordinate.long:4.00
Does anyone know how to get control over
the output without rewriting the ascii/json writer

Regards,

Daniel Guerra


More information about the Bro mailing list