TheHive-Project/TheHive

Live Stream Entries into Syslog Entries also

Open

#436 opened on Jan 17, 2018

View on GitHub
 (2 comments) (0 reactions) (0 assignees)Scala (688 forks)batch import
help wantedimplementation unlikelypriority:low

Repository metrics

Stars
 (3,915 stars)
PR merge metrics
 (No merged PRs in 30d)

Description

Request Type

Feature Request

Work Environment

Question Answer
OS version (server) Ubuntu
OS version (client) Windows
TheHive version / git hash 3.0.3
Package Type DEB

Problem Description

It would be great if we could send the live stream as syslog entries into the syslog server locally or remotely or within TheHive itself so it can be pushed to a remote syslog server. I could then collect the entries into our Syslog/SIEM solution

Possible Solutions Configure the live stream to generate a syslog entry when a live stream entry is generated.

Contributor guide

Research direction
Examine the live stream implementation in TheHive and add a syslog output using a library like syslog4j or logback's SyslogAppender. Configure a new output destination in the settings.
Tech stack
scala
Domain
backendsecurityobservability
Issue type
Feature
DifficultyEstimated implementation difficulty for a new contributor, from 1 for very small changes to 5 for expert-level work.
3
Estimated timeA rough time range for an experienced contributor to investigate, implement, test, and prepare a pull request.
1-2 days
Activity statusHow available the issue appears right now: fresh, active, stale, blocked, or waiting on maintainer input.
Active
ClarityHow clearly the issue explains the expected change, acceptance criteria, and next step.
Clear
Prerequisites
ScalaSyslog
Newbie friendlinessA 1-100 score estimating how approachable this issue is for first-time contributors.
30