Skip to content

extracter, and rules for Graylog

License

Notifications You must be signed in to change notification settings

enarcee/Graylog

Repository files navigation

Graylog-OPNsense_Extractors

Extractors for Graylog to parse OPNsense firewall logs. Should be able to parse most all IPv4/IPv6, ICMP, UDP, & TCP messages.

6/21/18 Update to IPv6 ICMP. OPNsense sends "ICMPv6", remove case insensitive regex for better processing when under heavy load.

8/13/19 Update to support OPNsense message format change.

6/26/21 Update - Removed some ICMP extractors. Updated to new OPNsense log message format.

12/2/21 Update - Fixed incorrect CSV headers. Removed OPNsense-Unbound_Extractor.

About

extracter, and rules for Graylog

Resources

License

Stars

Watchers

Forks

Releases

No releases published

Packages

No packages published