cisagov Malcolm Discussions
Discussions
-
You must be logged in to vote -
You must be logged in to vote Arkime exporting 0 byte PCAP
arkimeRelating to Malcolm's use of Arkime -
You must be logged in to vote troubleshooting Hedgehog forwarding Zeek/Suricata logs to Malcolm
logstashRelating to Malcolm's use of Logstash isorelating to the ISO-installed environment for Malcolm and/or Hedgehog sensorFor issues dealing with the Hedgehog OS capture sensor -
You must be logged in to vote -
You must be logged in to vote -
You must be logged in to vote Using OpenSearch Cluster
logstashRelating to Malcolm's use of Logstash cloudRelating to deployment of Malcolm in the cloud and/or with Kubernetes opensearchRelating to Malcolm's use of OpenSearch -
You must be logged in to vote supressing noisy Suricata rules with thresholding
suricataRelating to Malcolm's use of Suricata -
You must be logged in to vote -
You must be logged in to vote -
You must be logged in to vote -
You must be logged in to vote -
You must be logged in to vote -
You must be logged in to vote -
You must be logged in to vote -
You must be logged in to vote -
You must be logged in to vote Can Zeek send an alert if a new device/IP shows up on scans?
enhancementNew feature or request netboxRelated to Malcolm's use of NetBox -
You must be logged in to vote -
You must be logged in to vote -
You must be logged in to vote -
You must be logged in to vote Arkime container unhealthy
arkimeRelating to Malcolm's use of Arkime -
You must be logged in to vote -
You must be logged in to vote The problem of data latency when network traffic is particularly high
performanceRelated to speed/performance suricataRelating to Malcolm's use of Suricata -
You must be logged in to vote -
You must be logged in to vote
