Skip to content

Commit

Permalink
Docs update
Browse files Browse the repository at this point in the history
  • Loading branch information
mcdowellster committed Apr 9, 2024
1 parent 23c8a2e commit e88dc7f
Show file tree
Hide file tree
Showing 2 changed files with 1 addition and 10 deletions.
9 changes: 0 additions & 9 deletions docs/ctf/pipeline-geopfsense.md
Original file line number Diff line number Diff line change
Expand Up @@ -15,15 +15,6 @@ The Geo-Location Processor plugin scans all messages for fields containing exclu
- Navigate to `Enterprise -> Illuminate`
- Check off `Illuminate Core Geolocation and AS Enrichment Add-on for MaxMind Databases`
- Click `Enable Selected`
- Navigate to `System -> Configurations -> Plugins`
- Click `Geo-Location Processor`
- Click `Edit configuration`
- Click `Enable Geo-Location processor`
- Update the paths to `/usr/share/graylog/data/config/`
>Note, this path will differ depending on your configuration. This path is inside our Docker Container for this lab
- Click `Update configuration`

<img src="./images/pipeline-illuminatep5.png" width="541" height="487">

>>>**Send those logs in again from the Dataset tab!**
Expand Down
2 changes: 1 addition & 1 deletion docs/ctf/pipeline-grokgrok.md
Original file line number Diff line number Diff line change
Expand Up @@ -33,7 +33,7 @@ GROK makes turning logs into fields a breeze. With the example log message we ca

There are so many patterns built-in. We are going to use `%{IPv4}` and `%{INT}` to grab the details of the source IP, Destination IP, Source Port and Destination Port:

![](images/pipeline-grokgrokp1.png)
![](./images/pipeline-grokgrokp1.png)


<br>
Expand Down

0 comments on commit e88dc7f

Please sign in to comment.