4.9.2 Logs
Every entry filed under Logs and its subtopics.
Level
- Beginner 4
- Intermediate 3
- Advanced 0
What kind of help
- Guided project 0
- Explains an idea 2
- Step by step 3
- Cheat sheet 1
- Fixes an error 1
What do these mean?
- Beginner
- You are new to this topic.
- Intermediate
- You use it, and want to get better.
- Advanced
- You know it well and need the details.
- Guided project
- Build something small from start to finish, step by step.
- Explains an idea
- Plain words on how something works and why.
- Step by step
- Numbered steps to get one task done.
- Cheat sheet
- Commands and options in a table, to look up fast.
- Fixes an error
- An error message, what it means, and how to solve it.
12 entries
- 0440 pySigma: the Python library that converts Sigma rules into queries pySigma parses Sigma detection rules and, with backend plugins, converts them into native queries for Splunk, Elastic, Loki, Sentinel and other log… Any system Repo Detection & threat hunting · Logs 15 Oct 2026
- 0442 Security Onion: a Linux distribution for security monitoring Security Onion packages Suricata, Zeek, the Elastic stack, host agents and investigation tools into one installable Linux platform, so a team can… Linux Repo Detection & threat hunting · Logs 15 Oct 2026
- 0443 Security monitoring explained: IDS, SIEM, EDR and where the logs go A plain language map of the security monitoring tool families, what each one watches, how they feed one another, and where the… Beginner · Explains an idea · Any system Article Detection & threat hunting · Logs 15 Oct 2026
- 0434 Wazuh: an open source security platform with agents, SIEM and XDR Wazuh installs a small agent on each server and sends its logs, file changes and package lists to a central manager that… Linux, macOS, Windows Repo Detection & threat hunting · Logs 15 Oct 2026
- 0437 Zeek: network security monitoring that turns traffic into logs Zeek, formerly Bro, watches network traffic and writes structured logs of every connection, DNS query, HTTP request and certificate it sees. Analysts… Linux, macOS Repo Detection & threat hunting · Logs 15 Oct 2026
- 0432 Try Sigma rules against your own logs Install the sigma-cli converter, take a rule from the public SigmaHQ library, convert it into a query for a log tool you… Intermediate · Step by step · Linux, macOS Article Logs · Security resources & detection 15 Oct 2026
- 0373 Loki: ship and search logs Run Loki, Grafana Alloy and Grafana with Docker Compose, collect the systemd journal and /var/log files with a short Alloy configuration, and… Intermediate · Step by step · Linux Article Logs 15 Oct 2026
- 0376 Loki: horizontally scalable log aggregation inspired by Prometheus The Grafana Loki repository: a log store that indexes labels instead of full text, queried with LogQL from Grafana or logcli, with… Linux, macOS Repo Logs 15 Oct 2026
- 0371 Where are the logs? journalctl, /var/log and container logs A practical map of where Linux programs write their logs and the commands to read them: journalctl filters, the classic files under… Beginner · Step by step · Linux Article Logs 15 Oct 2026
- 0323 Fix: Failed to start service, how to read systemctl status and journalctl Job for x.service failed tells you only that the service did not start. The real reason is in systemctl status and journalctl… Beginner · Fixes an error · Linux Article Logs · Services & systemd 15 Oct 2026
- 0291 What is a log? A log is a running record of what a program did and when, written to a file so you can look back… Beginner · Explains an idea · Any system Article Logs 15 Oct 2026
- 0193 Linux logs reference: journalctl, journald storage, logrotate and centralized logging Read and filter systemd journal logs, keep their disk use in check, rotate classic log files with logrotate, and understand when to… Intermediate · Cheat sheet · Linux Article Linux administration · Logs 15 Oct 2026