UberAgent Monitoring Suite

A filter for Logstash parsing PI-Hole logs + Dashboard to visualize the data

This watch is getting data from the Elasticsearch shards API directly and checking for large shards.

This is an example of how to build an sankey visualization using the vega visualization in Kibana.

Download 1165 Sigma rules for Elastic Security. Includes coverage for MITRE ATT&CK tactics like Execution and Defense Evasion. Compatible with Elastic Stack 8.x and Serverless.

ACSC Advisory IOCs detection rules for Elastic SIEM

Make Logstash a REST endpoint that executes scripts or manually adds data in Elasticsearch.

Logstash Parsing Configurations for Elastic SIEM parses many different sources into ECS

Link to every content you want within your Kibana dashboards. This example is using links to cloud providers.

A vega visualization that shows the connection between resource group, resource type and the resource itself based on Elastic agent azure billing data integration.

This watch is moving time based indices into the frozen state.

A collection of rules based on the Sigma detection rules for Windows Sysmon events based on Winlogbeat data.

This canvas examples shows some possibilities of how to visualize data flows. Every flow can be activated / deactivated based on your Elasticsearch data.