Issues

• Mail dashboard

  philhagen/sof-elk#409 · Filter by author philhagen opened on Sep 4, 2026
  

• Refine syslog parser to handle UniFi format

  philhagen/sof-elk#408 · Filter by author philhagen opened on Aug 8, 2026
  

• Consider deleting files when ingest is complete

  philhagen/sof-elk#402 · Filter by author philhagen opened on May 19, 2026
  

• Handle hostname:port format in vhost_combined format

  philhagen/sof-elk#398 · Filter by author philhagen opened on Apr 7, 2026
  

• TOR node identification

  philhagen/sof-elk#397 · Filter by author philhagen opened on Mar 28, 2026
  1

• Create an enable/disable functionality for configuration files

  philhagen/sof-elk#394 · Filter by author philhagen opened on Dec 24, 2025
  

• Move de-dupe function to an external ruby script

  philhagen/sof-elk#392 · Filter by author philhagen opened on Dec 12, 2025
  

• Add wiki page with blog/etc coverage

  documentation
  philhagen/sof-elk#385 · Filter by author philhagen opened on Sep 18, 2025
  1

  

• Plaso records (mostly) go to wrong index

  philhagen/sof-elk#383 · Filter by author philhagen opened on Aug 29, 2025
  

• Consider a "post upgrade" apt/dpkg hook to (re)install Logstash plugins after upgrade

  philhagen/sof-elk#378 · Filter by author philhagen opened on Jul 29, 2025
  

• Add journald export handling

  philhagen/sof-elk#369 · Filter by author philhagen opened on May 30, 2025
  

• Sysmon logs not being parsed by logstash

  philhagen/sof-elk#335 · Filter by author matthewerobison opened on Sep 26, 2024
  1

  

• Best practice for local Evtx ingestion

  philhagen/sof-elk#332 · Filter by author aarislarsen opened on Aug 2, 2024
  9

  

• Consider replacing logstash syslog input with filebeat processor

  philhagen/sof-elk#328 · Filter by author philhagen opened on Jun 6, 2024 · Q1CY2026
  

• identify supported configuration for remote filebeat log shipping

  philhagen/sof-elk#327 · Filter by author philhagen opened on Apr 29, 2024 · Q2CY2026
  

• EVTX in JSON format not being interpretted.

  philhagen/sof-elk#290 · Filter by author gru3zi opened on Sep 8, 2023 · Q1CY2026
  4

  

• Create cloud acquisition/export README document

  documentation
  philhagen/sof-elk#275 · Filter by author philhagen opened on May 9, 2023
  3

  

• Feature request: Integrate Velociraptor via Logstash plugins

  philhagen/sof-elk#250 · Filter by author certrik opened on Mar 30, 2022
  2

• Handle winlogbeat type

  enhancement
  philhagen/sof-elk#219 · Filter by author birdman4512 opened on May 21, 2021
  1

  

• Add remote GCP consumption via pub/sub

  philhagen/sof-elk#209 · Filter by author philhagen opened on Apr 2, 2021
  

• use json output for nfdump data files

  philhagen/sof-elk#207 · Filter by author philhagen opened on Mar 26, 2021
  1

  

• SonicWall syslogs

  philhagen/sof-elk#206 · Filter by author jcclare opened on Feb 23, 2021

• add RFC5424 (IETF) syslog format handling

  philhagen/sof-elk#149 · Filter by author philhagen opened on Feb 26, 2019
  8

• Document dashboard export process

  documentation
  philhagen/sof-elk#145 · Filter by author philhagen opened on Feb 5, 2019
  

• Create TCP Flags visualization

  philhagen/sof-elk#140 · Filter by author philhagen opened on Dec 19, 2018