opnsense-logstash-config

This repository contains a logstash configuration file, to make the logs indexable (for example for use with Elasticsearch and Kibana)

This is not an official file but contributions are welcome.

You can download and use this file at your own risk.

You need to have the opnsensefilter plugin installed in your logstash for this to work. Run the following command on your Logstash host:

logstash-plugin install logstash-filter-opnsensefilter

Your Elasticsearch instance needs the ingest-geoip plugin:

elasticsearch-plugin install ingest-geoip

Once it is installed, (re)start Logstash or Elasticsearch, respectively.