pigsty-sguil

This is a sguil output plugin for Pigsty (see https://github.com/threatstack/pigsty).

Installation

$3

npm install pigsty-sguil -g

$3

npm install https://github.com/threatstack/pigsty-sguil/tarball/master -g

Configuration

Please add the following configuration to the output section in /etc/pigsty/pigsty.config.js
``
output: {

sguil: {
host: '127.0.0.1',
port: 7736,
netname: 'mynetname' // optional, will use sensor.name otherwise
}
}
`

$3

add the environment variable DEBUG=pigsty-sguil

`
DEBUG=pigsty-sguil pigsty
``

$3

#### Known Issues

* missing some ip flags

#### Reporting

Use the git issues, or send an email to support@threatstack.com

License

Copyright (C) 2013 Threat Stack, Inc (https://www.threatstack.com)

This program is free software: you can redistribute it and/or modify
it under the terms of the GNU General Public License as published by
the Free Software Foundation, either version 3 of the License, or
(at your option) any later version.

This program is distributed in the hope that it will be useful,
but WITHOUT ANY WARRANTY; without even the implied warranty of
MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
GNU General Public License for more details.

You should have received a copy of the GNU General Public License
along with this program. If not, see .