Security data is only as good as the pipelines behind it. Learn how to collect, enrich, and secure telemetry using open source tools like Filebeat, Logstash, Redis, Kafka, and Elasticsearch.
https://nostarch.com/data-engineering-cybersecurity
https://nostarch.com/data-engineering-cybersecurity
November 16, 2025 at 8:30 PM
Security data is only as good as the pipelines behind it. Learn how to collect, enrich, and secure telemetry using open source tools like Filebeat, Logstash, Redis, Kafka, and Elasticsearch.
https://nostarch.com/data-engineering-cybersecurity
https://nostarch.com/data-engineering-cybersecurity
у нас вроде filebeat юзают
June 3, 2025 at 9:55 AM
у нас вроде filebeat юзают
New Post: Deploy Elastic Stack on Ubuntu VPS
#certbot #elasticsearch #filebeat #kibana #letsencrypt #logstash #nginx #opensource #reverseproxy #selfhosting #selfhosted #ubuntu #ufw #vps #Cloud #Guides #VPS
#certbot #elasticsearch #filebeat #kibana #letsencrypt #logstash #nginx #opensource #reverseproxy #selfhosting #selfhosted #ubuntu #ufw #vps #Cloud #Guides #VPS
Deploy Elastic Stack on Ubuntu VPS
blog.radwebhosting.com
November 30, 2025 at 2:57 PM
New Post: Deploy Elastic Stack on Ubuntu VPS
#certbot #elasticsearch #filebeat #kibana #letsencrypt #logstash #nginx #opensource #reverseproxy #selfhosting #selfhosted #ubuntu #ufw #vps #Cloud #Guides #VPS
#certbot #elasticsearch #filebeat #kibana #letsencrypt #logstash #nginx #opensource #reverseproxy #selfhosting #selfhosted #ubuntu #ufw #vps #Cloud #Guides #VPS
Looks like filebeat is still a thing - though not sure what BetterStack requires or if it could be targeted.
Filebeat replaced another log shipper I remember using but I've lost the name of that to time.
Filebeat replaced another log shipper I remember using but I've lost the name of that to time.
February 12, 2026 at 9:55 AM
Looks like filebeat is still a thing - though not sure what BetterStack requires or if it could be targeted.
Filebeat replaced another log shipper I remember using but I've lost the name of that to time.
Filebeat replaced another log shipper I remember using but I've lost the name of that to time.
С другой стороны, может и filebeat можно прикрутить или что-то типа него.
June 3, 2025 at 10:01 AM
С другой стороны, может и filebeat можно прикрутить или что-то типа него.
התעוררתי בחמש וחצי עם מחשבות על filebeat.
אפילו המזג אוויר עוד לא ער
אפילו המזג אוויר עוד לא ער
May 3, 2024 at 5:18 AM
התעוררתי בחמש וחצי עם מחשבות על filebeat.
אפילו המזג אוויר עוד לא ער
אפילו המזג אוויר עוד לא ער
Not me trying to learn about how filebeat, logstash and elastic all work together vs. trying to wing it 🤣
June 3, 2025 at 9:21 PM
Not me trying to learn about how filebeat, logstash and elastic all work together vs. trying to wing it 🤣
원래는 filebeat -> logstash -> elasticsearch -> kibana로 구성을 하려고 했는데 이제는 agent(뭐든간에) -> vector -> elasticsearch -> grafana로 구성해야겠음. kibana 구성이 생각보다 좀 거시기하네
December 10, 2024 at 9:52 AM
원래는 filebeat -> logstash -> elasticsearch -> kibana로 구성을 하려고 했는데 이제는 agent(뭐든간에) -> vector -> elasticsearch -> grafana로 구성해야겠음. kibana 구성이 생각보다 좀 거시기하네
|Friday evening Nick]: "It's been a while since I tried Elasticsearch, I should set it up on my homelab..."
[Saturday evening Nick]: "What have I done."
#homelab #elasticsearch #filebeat
[Saturday evening Nick]: "What have I done."
#homelab #elasticsearch #filebeat
February 8, 2025 at 6:49 PM
|Friday evening Nick]: "It's been a while since I tried Elasticsearch, I should set it up on my homelab..."
[Saturday evening Nick]: "What have I done."
#homelab #elasticsearch #filebeat
[Saturday evening Nick]: "What have I done."
#homelab #elasticsearch #filebeat
fluentd/filebeat/logstashなどの代替となるRust実装のログ収集ツール。最近これ流行ってる？複数のサイトでこれを使った例を見かけた。買収されて今はDatadog傘下らしい。
GitHub - vectordotdev/vector: A high-performance observability data pipeline.
A high-performance observability data pipeline. Contribute to vectordotdev/vector development by creating an account on GitHub.
github.com
May 3, 2025 at 3:44 PM
fluentd/filebeat/logstashなどの代替となるRust実装のログ収集ツール。最近これ流行ってる？複数のサイトでこれを使った例を見かけた。買収されて今はDatadog傘下らしい。
Kubernetes event logger watches Kubernetes Events and logs them to stdout in JSON to be collected and stored by your logging solution, e.g. fluentd, fluent-bit, Filebeat, or Promtail
➤ https://ku.bz/njnC7D535
➤ https://ku.bz/njnC7D535
July 26, 2025 at 7:06 PM
Kubernetes event logger watches Kubernetes Events and logs them to stdout in JSON to be collected and stored by your logging solution, e.g. fluentd, fluent-bit, Filebeat, or Promtail
➤ https://ku.bz/njnC7D535
➤ https://ku.bz/njnC7D535
🚀 Deploy Elastic Stack on Ubuntu VPS (5 Minute Quick-Start Guide)
#certbot #elasticsearch #filebeat #kibana #letsencrypt #logstash #nginx #opensource #reverseproxy #selfhosted #selfhosting #ubuntu #ufw #vps #Cloud #Guides #VPS
#certbot #elasticsearch #filebeat #kibana #letsencrypt #logstash #nginx #opensource #reverseproxy #selfhosted #selfhosting #ubuntu #ufw #vps #Cloud #Guides #VPS
🚀 Deploy Elastic Stack on Ubuntu VPS (5 Minute Quick-Start Guide)
blog.radwebhosting.com
March 2, 2026 at 8:39 PM
🚀 Deploy Elastic Stack on Ubuntu VPS (5 Minute Quick-Start Guide)
#certbot #elasticsearch #filebeat #kibana #letsencrypt #logstash #nginx #opensource #reverseproxy #selfhosted #selfhosting #ubuntu #ufw #vps #Cloud #Guides #VPS
#certbot #elasticsearch #filebeat #kibana #letsencrypt #logstash #nginx #opensource #reverseproxy #selfhosted #selfhosting #ubuntu #ufw #vps #Cloud #Guides #VPS
🚀 Deploy Elastic Stack on Ubuntu VPS (5 Minute Quick-Start Guide)
#certbot #elasticsearch #filebeat #kibana #letsencrypt #logstash #nginx #opensource #reverseproxy #selfhosting #selfhosted #ubuntu #ufw #vps #Cloud #Guides #VPS
#certbot #elasticsearch #filebeat #kibana #letsencrypt #logstash #nginx #opensource #reverseproxy #selfhosting #selfhosted #ubuntu #ufw #vps #Cloud #Guides #VPS
🚀 Deploy Elastic Stack on Ubuntu VPS (5 Minute Quick-Start Guide)
blog.radwebhosting.com
January 30, 2026 at 8:39 PM
🚀 Deploy Elastic Stack on Ubuntu VPS (5 Minute Quick-Start Guide)
#certbot #elasticsearch #filebeat #kibana #letsencrypt #logstash #nginx #opensource #reverseproxy #selfhosting #selfhosted #ubuntu #ufw #vps #Cloud #Guides #VPS
#certbot #elasticsearch #filebeat #kibana #letsencrypt #logstash #nginx #opensource #reverseproxy #selfhosting #selfhosted #ubuntu #ufw #vps #Cloud #Guides #VPS
🚀 Deploy Elastic Stack on Ubuntu VPS (5 Minute Quick-Start Guide)
#certbot #elasticsearch #filebeat #kibana #letsencrypt #logstash #nginx #opensource #reverseproxy #selfhosting #selfhosted #ubuntu #ufw #vps #Cloud #Guides #VPS
#certbot #elasticsearch #filebeat #kibana #letsencrypt #logstash #nginx #opensource #reverseproxy #selfhosting #selfhosted #ubuntu #ufw #vps #Cloud #Guides #VPS
🚀 Deploy Elastic Stack on Ubuntu VPS (5 Minute Quick-Start Guide)
blog.radwebhosting.com
December 30, 2025 at 7:57 PM
🚀 Deploy Elastic Stack on Ubuntu VPS (5 Minute Quick-Start Guide)
#certbot #elasticsearch #filebeat #kibana #letsencrypt #logstash #nginx #opensource #reverseproxy #selfhosting #selfhosted #ubuntu #ufw #vps #Cloud #Guides #VPS
#certbot #elasticsearch #filebeat #kibana #letsencrypt #logstash #nginx #opensource #reverseproxy #selfhosting #selfhosted #ubuntu #ufw #vps #Cloud #Guides #VPS
🚀 Deploy Elastic Stack on Ubuntu VPS (5 Minute Quick-Start Guide) Here’s the guide to deploy Elastic Stack on Ubuntu VPS, with secure access, HTTPS proxying, and service optimization. What is ...
#Guides #Cloud #VPS #certbot #elasticsearch #filebeat […]
[Original post on blog.radwebhosting.com]
#Guides #Cloud #VPS #certbot #elasticsearch #filebeat […]
[Original post on blog.radwebhosting.com]
June 7, 2026 at 9:04 AM
🚀 Deploy Elastic Stack on Ubuntu VPS (5 Minute Quick-Start Guide) Here’s the guide to deploy Elastic Stack on Ubuntu VPS, with secure access, HTTPS proxying, and service optimization. What is ...
#Guides #Cloud #VPS #certbot #elasticsearch #filebeat […]
[Original post on blog.radwebhosting.com]
#Guides #Cloud #VPS #certbot #elasticsearch #filebeat […]
[Original post on blog.radwebhosting.com]
A new AI review! loggie-io/loggie ⭐3.6/5.0
Loggie is a cloud-native log agent/aggregator written in Go, positioned as a high-performance alternative to Filebeat/Fluentd-style shippers with a Kubernetes-first operating model.
https://gitrated.com/loggie-io/loggie
Loggie is a cloud-native log agent/aggregator written in Go, positioned as a high-performance alternative to Filebeat/Fluentd-style shippers with a Kubernetes-first operating model.
https://gitrated.com/loggie-io/loggie
March 19, 2026 at 9:59 PM
A new AI review! loggie-io/loggie ⭐3.6/5.0
Loggie is a cloud-native log agent/aggregator written in Go, positioned as a high-performance alternative to Filebeat/Fluentd-style shippers with a Kubernetes-first operating model.
https://gitrated.com/loggie-io/loggie
Loggie is a cloud-native log agent/aggregator written in Go, positioned as a high-performance alternative to Filebeat/Fluentd-style shippers with a Kubernetes-first operating model.
https://gitrated.com/loggie-io/loggie
A free license gets you Splunk Universal Forwarder, however, which scales more effectively than filebeat and has a less volatile codebase. Both are great tools, but each has strengths and weaknesses offset by the other.
December 2, 2024 at 1:48 AM
A free license gets you Splunk Universal Forwarder, however, which scales more effectively than filebeat and has a less volatile codebase. Both are great tools, but each has strengths and weaknesses offset by the other.
Centralising your Journald logs using Filebeat and Graylog 6.x
#Graylog is a good option for getting logs centralised, managed and viewable so you can alert on them
daveknowstech.notion.site/Centralising...
#daveknowstech #tech #howto #logging #sre #devops
#Graylog is a good option for getting logs centralised, managed and viewable so you can alert on them
daveknowstech.notion.site/Centralising...
#daveknowstech #tech #howto #logging #sre #devops
October 29, 2024 at 2:53 PM
Centralising your Journald logs using Filebeat and Graylog 6.x
#Graylog is a good option for getting logs centralised, managed and viewable so you can alert on them
daveknowstech.notion.site/Centralising...
#daveknowstech #tech #howto #logging #sre #devops
#Graylog is a good option for getting logs centralised, managed and viewable so you can alert on them
daveknowstech.notion.site/Centralising...
#daveknowstech #tech #howto #logging #sre #devops
ダッシュボード真似していくぞーわいわい
ISUCON 14: ClickHouse と OpenTelemetry で ISUCON の計測環境を作ったら快適だった - Unyablog.
ISUCON 14 に id:utgwkk, id:wass80 と「ミレニアムサイエンススクール」というチーム名で参加した。 結果は 28875 点で 22 位！去年は fail して最下位だったので反省を活かすことができたのでは？ 一昨年に Kibana / Elasticsearch / Filebeat で解析環境を組んでサクセスしていたが、今年は OpenTelemetry (Otel) をベースにモニタリング環境を作り直し、バックエンドは ClickHouse、フロントは Grafana の構成でやってみた。これがなかなか良かったので紹介。 コンテスト当日のアプリ改善周りは utg…
nonylene.hatenablog.jp
December 22, 2024 at 2:18 PM
ダッシュボード真似していくぞーわいわい
🧠 Tu veux monter un lab orienté détection & Blue Team ?
Voici une stack simple à mettre en place :
Wazuh (SIEM open source)
Suricata (IDS/IPS)
Filebeat + Elasticsearch
Zeek (analyse réseau)
Velociraptor (DFIR live)
Tous ces outils sont gratuits et dispo sur GitHub
#BlueTeam #DFIR #Homelab
Voici une stack simple à mettre en place :
Wazuh (SIEM open source)
Suricata (IDS/IPS)
Filebeat + Elasticsearch
Zeek (analyse réseau)
Velociraptor (DFIR live)
Tous ces outils sont gratuits et dispo sur GitHub
#BlueTeam #DFIR #Homelab
April 10, 2025 at 7:55 AM
Generally people don't tend to use IIS much anymore, so that exact example is hard.
For older full framework .NET, the apps are often using log4net, where you can configure the log appender to point to other types of sources in (buffered) realtime.
Have used filebeat to logship to ELK before also.
For older full framework .NET, the apps are often using log4net, where you can configure the log appender to point to other types of sources in (buffered) realtime.
Have used filebeat to logship to ELK before also.
February 12, 2026 at 9:52 AM
Generally people don't tend to use IIS much anymore, so that exact example is hard.
For older full framework .NET, the apps are often using log4net, where you can configure the log appender to point to other types of sources in (buffered) realtime.
Have used filebeat to logship to ELK before also.
For older full framework .NET, the apps are often using log4net, where you can configure the log appender to point to other types of sources in (buffered) realtime.
Have used filebeat to logship to ELK before also.
Filebeat processors, however, are easier to work with than Splunk transforms, especially if your use case is mostly well-formed structured JSON. Overall, Beats will catch up with time. It somewhat paradoxically needs a larger proprietary software audience to push it.
December 2, 2024 at 2:17 AM
Filebeat processors, however, are easier to work with than Splunk transforms, especially if your use case is mostly well-formed structured JSON. Overall, Beats will catch up with time. It somewhat paradoxically needs a larger proprietary software audience to push it.
I have had zero luck with truenas scale's container setup outside of the apps catalog, but even then I'm finding limited on my pihole server
Namely that I can't run filebeat and acme on it without great effort.
I know I've outgrown it and am ready for ESXi.
Namely that I can't run filebeat and acme on it without great effort.
I know I've outgrown it and am ready for ESXi.
July 15, 2025 at 11:42 PM
I have had zero luck with truenas scale's container setup outside of the apps catalog, but even then I'm finding limited on my pihole server
Namely that I can't run filebeat and acme on it without great effort.
I know I've outgrown it and am ready for ESXi.
Namely that I can't run filebeat and acme on it without great effort.
I know I've outgrown it and am ready for ESXi.
J'avais eu le même soucis sur un seul worker, je me souviens plus trop quel processus était en cause (filebeat ou VictoriaMetrics peut-être), mais j'avais résolu aussi avec le même param sysctl. J'avais trouvé le coupable à coup de journalctl de kubelet, ps, lsof et strace sur le worker.
February 11, 2025 at 5:55 PM
J'avais eu le même soucis sur un seul worker, je me souviens plus trop quel processus était en cause (filebeat ou VictoriaMetrics peut-être), mais j'avais résolu aussi avec le même param sysctl. J'avais trouvé le coupable à coup de journalctl de kubelet, ps, lsof et strace sur le worker.