Tricks and Tips

This section is a collection of miscellaneous tricks and tips for Security Onion.

• Backups
  • What is being backed up?
  • Kibana Customizations
  • Elastic Data
• Docker
  • Download
  • Security
  • Elastic
  • Images
  • Logs
  • Registry
  • Networking and Bridging
  • Containers
  • VMware Tools
  • Dependencies
  • More Information
• DNS Anomaly Detection
• Endgame
  • Configuration
  • Example Endgame Data
  • Pivot to Endgame Console
• ICMP Anomaly Detection
  • Usage
  • Presentation
  • Download
• Jupyter Notebook
  • Overview
  • Security Onion Setup
  • Jupyter Notebook
• Machine Learning
  • Listing components
  • Enabling components
  • Disabling components
  • Logscan
• Adding a new disk
  • Method 1: LVM (Logical Volume Management)
  • Method 2: Mount a separate drive to /nsm
  • Method 3: Make /nsm a symlink to the new logging location
• PCAPs for Testing
  • tcpreplay
  • so-import-pcap
• Removing a Node
  • Salt
  • Grafana
  • SOC
  • FleetDM
  • Cross Cluster Search
• Syslog Output
• UTC and Time Zones