help with search string

[Shawn Wiley]

Hi all Im new to ELSA and am requesting help with a search string or if you could point me to a good doc that has examples of what Im looking for. I am sniffing wan traffic at a point where I am going to put a firewall so I want to see all connections that have been made over the last few days. How can I do with with elsa? Thanks in advance and if this can be found somewhere easily please point me to the best resource were  I can find this info.

Thanks.

[Wes Lambert]

Shawn,

Try having a look at the following:

https://github.com/Security-Onion-Solutions/security-onion/wiki/ELSAQueryTips

https://github.com/mcholste/elsa/wiki/Documentation#Queries

Thanks,

Wes

On Wed, Sep 7, 2016 at 11:14 AM, Shawn Wiley <slw...@gmail.com> wrote:

Hi all Im new to ELSA and am requesting help with a search string or if you could point me to a good doc that has examples of what Im looking for. I am sniffing wan traffic at a point where I am going to put a firewall so I want to see all connections that have been made over the last few days. How can I do with with elsa? Thanks in advance and if this can be found somewhere easily please point me to the best resource were  I can find this info.

Thanks.

--
You received this message because you are subscribed to the Google Groups "enterprise-log-search-and-archive" group.
To unsubscribe from this group and stop receiving emails from it, send an email to enterprise-log-search-and-archive+unsubscribe@googlegroups.com.
For more options, visit https://groups.google.com/d/optout.