Edit: This post is pretty old and Elasticsearch/Logstash/Kibana have evolved a lot since it was written. That’s quite a title. I work with an ONSSI Ocularis CS setup. Originally installed with NetDVMS, but upgraded to RC-C. This post builds upon a couple earlier posts http://www.ragingcomputer.com/2014/02/logstash-elasticsearch-kibana-for-windows-event-logs http://www.ragingcomputer.com/2014/02/sending-windows-event-logs-to-logstash-elasticsearch-kibana-with-nxlog What does all this mean? This heavily redacted screenshotContinue reading “Collecting ONSSI Ocularis CS RC-C Logs with nxlog / Logstash / Elasticsearch / Kibana3”