Introduction A few days back I encountered with a simple but painful issue. I am using ELK to parse my application logs and generate some meaningful views. Here I met with an issue which is, logstash inserts my logs into elasticsearch as per the current timestamp, instead of the actual time of log generation. This …
Tag Archives: ELK
Snoopy + ELK : Exhibit sudo commands in Kibana Dashboard
Logging User Commands: Snoopy Logger About Snoopy Logger Snoopy logs all the commands that are ran by any user to a log file. This is helpful for auditing and keep an eye on user activities. Automated Installation For Automated Installation/Configuration of Snoopy we have created a Puppet module and Ansible Role. Puppet Module: https://forge.puppetlabs.com/opstree/snoopy Ansible …
Continue reading “Snoopy + ELK : Exhibit sudo commands in Kibana Dashboard”