Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Scirius / Suricata GUI problem #207

Open
tenee opened this issue Aug 24, 2020 · 3 comments
Open

Scirius / Suricata GUI problem #207

tenee opened this issue Aug 24, 2020 · 3 comments

Comments

@tenee
Copy link

tenee commented Aug 24, 2020

Hi everyone, I have a problem configuring Scirius with Suricata. launching the commands to start both, from termimal everything seems to work correctly and also the logs are written correctly. it seems that scirius is unable to intercept events

Suricata run command

sudo suricata -c /etc/suricata/suricata.yaml -i eth0

Scirius run command

python manage.py runserver < ip:port >

This is the configuration of suricata on scirius

image

The rules have been enabled in the graphical interface and during the suricata configuration, but scirius does not seem to detect any events:

image

image

also scirius does not load the menu on the right well:

image

The version of Suricata is 5.0.3 and the version of Scirius is 3.4.0

Could you give me some solution on how to solve the problem?

Thanks in advance

@sgabe
Copy link

sgabe commented Aug 25, 2020

Events should be loaded from ES. Are you sure that events are forwarded to ES and properly indexed?

@tenee
Copy link
Author

tenee commented Aug 26, 2020

How can I check that events are forwarded to ES and properly indexed?
I installed ES following the installation of Suricata hoping that scirius would be able to represent the events but I don't understand why the events are not processed.

@pevma
Copy link
Member

pevma commented Oct 5, 2020

Is this still an issue? If you check in Kibana , do you have events populated?

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

No branches or pull requests

3 participants