ZEERBIT

ZeerBit project provides a lightweight, extendable, high performance data pipeline to transform Zeek network logs into Elastic Common Schema event model and fuel Elastic SIEM capabilities... Information Security professionals have been trusting a job of traffic analysis to an open-source network sensor Zeek for more than two decades. Zeek converts IP packet streams into rich network transaction logs, and does it in a highly customizable fashion. In many organizations, Zeek network logs are being ingested into SIEM data lakes like ElasticSearch, Splunk or Prometheus via custom log pipelines for further analysis by Security Operation Centers