Hub collection

Name: OpenSearch Dashboard - Bruteforce Protection
Author: bouddha-fr

More info

OpenSearch Dashboard - Bruteforce Protection Collection by bouddha-fr | CrowdSec Hub

« OpenSearch Dashboard - Bruteforce Protection »Collection
v0.2 by bouddha-fr

OpenSearch support : parser and brute-force detection

Installation

cscli collections install bouddha-fr/opensearch-dashboard

Source code

Collection for Opensearch Dashboard parser and bruteforce detection.

Typically you may find other software using this such as Wazuh.

Example acquistion:

1filenames:
2 - /path/to/log.txt
3labels:
4  type: opensearch-dashboards

1filenames:
2 - /var/log/syslog
3labels:
4  type: syslog

1source: journalctl
2journalctl_filter:
3 - "_SYSTEMD_UNIT=opensearch-dashboards.service"
4labels:
5  type: syslog

Content