Comments (2)
version: "3"
services:
elasticsearch:
container_name: elasticsearch
image: docker.elastic.co/elasticsearch/elasticsearch:7.11.0
environment:
- discovery.type=single-node
- "ES_JAVA_OPTS=-Xms256m -Xmx256m"
- cluster.routing.allocation.disk.threshold_enabled=false
- xpack.security.enabled=false
- xpack.monitoring.enabled=false
- xpack.ml.enabled=false
- xpack.graph.enabled=false
- xpack.watcher.enabled=false
- http.cors.enabled=true
- http.cors.allow-origin=/https?:\/\/localhost(:[0-9]+)?/
ports:
- 9200:9200
networks:
- siemnet
volumes:
- es-data:/usr/share/elasticsearch/data
logstash:
container_name: logstash
image: defenxor/docker-logstash:7.11.0
command:
- -f/etc/logstash/conf.d
environment:
- XPACK_MONITORING_ENABLED=false
networks:
- siemnet
volumes:
- ./conf/logstash/conf.d:/etc/logstash/conf.d
- ./conf/logstash/index-template.d/es7:/etc/logstash/index-template.d
kibana:
container_name: kibana
image: docker.elastic.co/kibana/kibana:7.11.0
environment:
- XPACK_MONITORING_ENABLED=false
ports:
- 5601:5601
networks:
- siemnet
dsiem:
container_name: dsiem
image: defenxor/dsiem:latest
ports:
- "8080:8080"
networks:
- siemnet
volumes:
- dsiem-log:/dsiem/logs
environment:
- DSIEM_WEB_ESURL=http://elasticsearch:9200
- DSIEM_WEB_KBNURL=http://kibana:5601
filebeat:
container_name: filebeat
image: docker.elastic.co/beats/filebeat:7.11.0
user: root
networks:
- siemnet
volumes:
- filebeat-data:/usr/share/filebeat/data
- ./conf/filebeat/filebeat.yml:/usr/share/filebeat/filebeat.yml
- dsiem-log:/var/log/dsiem
- suricata-log:/var/log/suricata
filebeat-es:
container_name: filebeat-es
image: docker.elastic.co/beats/filebeat:7.11.0
user: root
networks:
- siemnet
volumes:
- ./conf/filebeat-es/filebeat.yml:/usr/share/filebeat/filebeat.yml
- ./conf/filebeat-es/fields.yml:/usr/share/filebeat/fields.yml
- ./conf/filebeat-es/module:/usr/share/filebeat/module
- ./conf/filebeat-es/modules.d:/usr/share/filebeat/modules.d
- filebeat-es-data:/usr/share/filebeat/data
- dsiem-log:/var/log/dsiem
suricata:
container_name: suricata
image: defenxor/suricata:1710
network_mode: "host"
cap_add:
- NET_ADMIN
- SYS_NICE
- NET_RAW
command:
[
"/bin/bash",
"-c",
"chown -R suri /var/log/suricata && /usr/bin/suricata -v -i ${PROMISC_INTERFACE}"
]
volumes:
- suricata-log:/var/log/suricata
volumes:
filebeat-es-data:
filebeat-data:
es-data:
dsiem-log:
suricata-log:
networks:
siemnet:
from dsiem.
I can also confirm that both ES and Kibana are actually running without any errors.
from dsiem.
Related Issues (20)
- Dsiem-Tools HOT 1
- [Question] Using Dsiem without ELK
- why doesn't dsiem accept logs? HOT 1
- CustomData problem HOT 1
- [Feature Request] Accept json array in POST /events route HOT 1
- CustomData special
- [Question] Reload directives HOT 1
- !:1 usage
- Unable to send events from Logstash to Dsiem HOT 2
- linux/arm64 server build HOT 1
- Order Independent "AND" for Directives? HOT 1
- How to set directives HOT 3
- 404 error when running demo HOT 1
- Unable to see siem_alarms in Kibana and Dsiem HOT 1
- esconfig.json HOT 1
- One stage rule
- Disconnected from ES http://:9200: Error: No Living connection HOT 2
- Error while getting firewall logs to DSIEM and Kibana Dashboard HOT 1
- DSIEM WITH AUDITD LOGS
Recommend Projects
-
React
A declarative, efficient, and flexible JavaScript library for building user interfaces.
-
Vue.js
🖖 Vue.js is a progressive, incrementally-adoptable JavaScript framework for building UI on the web.
-
Typescript
TypeScript is a superset of JavaScript that compiles to clean JavaScript output.
-
TensorFlow
An Open Source Machine Learning Framework for Everyone
-
Django
The Web framework for perfectionists with deadlines.
-
Laravel
A PHP framework for web artisans
-
D3
Bring data to life with SVG, Canvas and HTML. 📊📈🎉
-
Recommend Topics
-
javascript
JavaScript (JS) is a lightweight interpreted programming language with first-class functions.
-
web
Some thing interesting about web. New door for the world.
-
server
A server is a program made to process requests and deliver data to clients.
-
Machine learning
Machine learning is a way of modeling and interpreting data that allows a piece of software to respond intelligently.
-
Visualization
Some thing interesting about visualization, use data art
-
Game
Some thing interesting about game, make everyone happy.
Recommend Org
-
Facebook
We are working to build community through open source technology. NB: members must have two-factor auth.
-
Microsoft
Open source projects and samples from Microsoft.
-
Google
Google ❤️ Open Source for everyone.
-
Alibaba
Alibaba Open Source for everyone
-
D3
Data-Driven Documents codes.
-
Tencent
China tencent open source team.
from dsiem.