Tricks and Tips

This section is a collection of miscellaneous tricks and tips for Security Onion.

• Airgap
  • Key Differences
  • Updating
  • Updating from RC3
• Backups
  • What is being backed up?
  • Kibana Customizations
  • Elastic Data
• Docker
  • Download
  • Security
  • Elastic
  • Registry
  • Networking and Bridging
  • Containers
  • VMware Tools
  • Dependencies
• DNS Anomaly Detection
• ICMP Anomaly Detection
  • Usage
  • Presentation
  • Download
• Adding a new disk
  • Method 1: LVM (Logical Volume Management)
  • Method 2: Mount a separate drive to /nsm
  • Method 3: Make /nsm a symlink to the new logging location
• PCAPs for Testing
  • tcpreplay
  • so-import-pcap
• Removing a Node
  • Remove search node
• Syslog Output
• UTC and Time Zones