Information Security Stack Exchange is a question and answer site for information security professionals. It's 100% free, no registration required.

Sign up
Here's how it works:
  1. Anybody can ask a question
  2. Anybody can answer
  3. The best answers are voted up and rise to the top

I'm trying to find a suitable (or easily modifiable) web GUI for snort + modsecurity logs. As far as I know, Splunk can do that by installing the snort and modsecurity plugins. Is there any other option?

It does not have to be ready at the get go, I'm fine with a little modification here and there.

share|improve this question

closed as not constructive by Adi, Terry Chia, TildalWave, Gilles, AJ Henderson May 13 '13 at 13:11

As it currently stands, this question is not a good fit for our Q&A format. We expect answers to be supported by facts, references, or expertise, but this question will likely solicit debate, arguments, polling, or extended discussion. If you feel that this question can be improved and possibly reopened, visit the help center for guidance.If this question can be reworded to fit the rules in the help center, please edit the question.

You can use Jwall Auditviewer – Ali Ahmad May 13 '13 at 8:00

Those logs are all created in standard syslog format so any log aggregation solution will allow you to view and search the logs. There are plenty of options such as you mentioned but also proprietary like LogRhythm, ArcSight, LogLogic and others or open source like Alienware (OSSIM), OSSEC, Snare etc

There's also a GUI using BASE for Snort.

share|improve this answer

Not the answer you're looking for? Browse other questions tagged or ask your own question.