Brownian Demo by Vlad Grigorescu
Channel: Zeek
Date: 2014-04-15

As Bro is being used to monitor increasing amounts of traffic, the venerable text logs have become too slow and inflexible for many analysts. Using ElasticSearch to index logs in near real-time enables fast in-depth analysis, allows for complex queries and provides a built-in API to fit any workflow. Finally, a custom-built web interface that is tightly integrated with Bro allows analysts to quickly and efficiently drill down to the interesting events.