KO | EN

GitLite

Minimalist Open Source Repository Search Engine

gitlite — search

#codex #developer-tools #typescript #ai-agents #claude-code #python #mcp #react #cli #macos #ai-agent #deepseek-harness

SophosUTM-Logastsh

★ 12 Open GitHub ↗

Push your Sophos UTM log's in your ElasticSearch after a grokking it with Logstash

// repository documentation

Was this content helpful?

★ 0 (0 ratings)

# Logstash Grok Pattner for Sophos UTM (9.6)

This repo contain my integration of Sophos UTM log's in ELK. 
For send you log's in ELK from Sophos UTM, you can go on : 
**->** Logging & Reporting **->** Log Settings **->** Remote Syslog Server
> Add your Syslog server and Syslog port (default 514)
> **Note:** You don't have a Syslog TLS capability on Sophos.

# Configure your Rsyslog Input
I've choosen to send all my log in one file log file. Find a sample configuration in repo.

# Results in Kibana

**Firewall Dashboard**
![Firewall Dashboard](https://raw.githubusercontent.com/Twibow/SophosUTM-Logastsh/master/screenshot/Firewall_Kibana.png)

**IPS Dashboard**
![IPS Dashboard](https://raw.githubusercontent.com/Twibow/SophosUTM-Logastsh/master/screenshot/IPS_Kibana.png)

**Web Proxy Dashboard**
![Web Proxy Dashboard](https://raw.githubusercontent.com/Twibow/SophosUTM-Logastsh/master/screenshot/Proxy_Kibana.png)

**VPN Dashboard**
![VPN Dashboard](https://raw.githubusercontent.com/Twibow/SophosUTM-Logastsh/master/screenshot/VPN_Kibana.png)

**WAF Dashboard**
![WAF Dashboard](https://raw.githubusercontent.com/Twibow/SophosUTM-Logastsh/master/screenshot/WAF_Kibana.png)

SophosUTM-Logastsh

Explore Similar Repositories

Was this content helpful?

Recent Feedback

Download README