Search results

Create an enable/disable functionality for configuration files

Status: Open.

#394 In philhagen/sof-elk;

· philhagen opened on Dec 24, 2025

Move de-dupe function to an external ruby script

Status: Open.

#392 In philhagen/sof-elk;

· philhagen opened on Dec 12, 2025

Add wiki page with blog/etc coverage

documentation

Status: Open.

#385 In philhagen/sof-elk;

· philhagen opened on Sep 18, 2025

Plaso records (mostly) go to wrong index

Status: Open.

#383 In philhagen/sof-elk;

· philhagen opened on Aug 29, 2025

Consider a "post upgrade" apt/dpkg hook to (re)install Logstash plugins after upgrade

Status: Open.

#378 In philhagen/sof-elk;

· philhagen opened on Jul 29, 2025

Add journald export handling

Status: Open.

#369 In philhagen/sof-elk;

· philhagen opened on May 30, 2025

Overhaul sof-elk_clear.py

Status: Open.

#346 In philhagen/sof-elk;

· philhagen opened on Jan 4, 2025

Sysmon logs not being parsed by logstash

Status: Open.

#335 In philhagen/sof-elk;

· matthewerobison opened on Sep 26, 2024

Best practice for local Evtx ingestion

Status: Open.

#332 In philhagen/sof-elk;

· aarislarsen opened on Aug 2, 2024

Refine post-merge hook script

Status: Open.

#330 In philhagen/sof-elk;

· philhagen opened on Jul 21, 2024

·  

Q1CY2026

Consider replacing logstash syslog input with filebeat processor

Status: Open.

#328 In philhagen/sof-elk;

· philhagen opened on Jun 6, 2024

·  

Q1CY2026

identify supported configuration for remote <code>filebeat</code> log shipping

Status: Open.

#327 In philhagen/sof-elk;

· philhagen opened on Apr 29, 2024

·  

Q2CY2026