Logstash Timestamp

Introduction A few days back I encountered with a simple but painful issue. I am using ELK to parse my application logs  and generate some meaningful views. Here I met with an issue which is, logstash inserts my logs into elasticsearch as per the current timestamp, instead of the actual time of log generation. This …

Snoopy + ELK : Exhibit sudo commands in Kibana Dashboard

Logging User Commands: Snoopy Logger About Snoopy Logger Snoopy logs all the commands that are ran by any user to a log file. This is helpful for auditing and keep an eye on user activities. Automated Installation For Automated Installation/Configuration of Snoopy we have created a Puppet module and Ansible Role. Puppet Module: https://forge.puppetlabs.com/opstree/snoopy Ansible …

Design a site like this with WordPress.com
Get started