The Elastic Stack, consisting of Elasticsearch with Logstash and Kibana, commonly abbreviated "ELK", makes it easy to enrich, forward, and visualize log files. ELK is especially good for getting the most from your Snort 3.0 logs. This post will show you how to create a cool dashbaord: The dashboard shows the following: bring_da_heat - a heat map that plots event priority vs classification apple_pie - a pie chart that shows total bytes transferred by app greatest_hits - a data table that shows the rules generating the most events global_hot_spots - a geo plot of the event source address* size_o_gram - a histogram of logged packet / buffer sizes Get Started To get started, you will need to install the following: Snort 3.0 from https://snort.org/downloads/#snort-3.0 or from https://github.com/snortadmin/snort3 snort3-community-rules.tar.gz from https://snort.org/downloads#rules Open App ID from https://snort.org/downloads#openappid Elastic Stack from...