Hi
Do suricata support rabbitmq
is there any rabbitmq support/plugin for suricata log
thanks
Hi
Do suricata support rabbitmq
is there any rabbitmq support/plugin for suricata log
thanks
No, at least I’m not aware of any support. As our EVE logs are simple line based JSON logs, maybe there is some generic client out there that works. I see that Logstash has a RabbitMQ output module for instances.
syslog-ng has AMQP support, so that should be an option to forward the logs.