Been doing a lot with Elastic Stack and log ingestion. I had a very basic configuration file for NXlog for grabbing security events. However, I was getting lots of eventlogs into ElasticStack that I was not filtering on. So, as always, better to filter at the beginning and not at the end. I used this […]