Primjena alata ElasticSearch, LogStash i Kibana za analizu podataka o IP adresama

undergraduate thesis

• Title (english): Application of ElasticSearch, LogStash and Kibana for analysis of IP addresses data
• Author: Dora Bezuk
• Mentor: Stjepan Groš (mentor)
• Committee member: Stjepan Groš (predsjednik povjerenstva)
• Committee member: Ivan Grgurina (član povjerenstva)
• Committee member: Ivan Crnomarković (član povjerenstva)
• Granter: University of Zagreb; Faculty of Electrical Engineering and Computing; Zagreb
• Defense date and country: 2021-09-14, Croatia
• Scientific / art field, discipline and subdiscipline: TECHNICAL SCIENCES; Computing

Abstract

Cilj promatranja i pomne analize alata za agregaciju i vizualizaciju podataka u kontekstu
logova i podataka o IP adresama, je njihova primjena u vrsti obavještajnog rada
koji se fokusira na zaštitu od kibernetičkih prijetnji. U ovom radu isprobane su mogućnosti korištenja alata Logstash i Elasticsearch za agregaciju i analizu podataka o IP
adresama dobivenim iz Apache logova, a pomoću alata Kibana i Grafana promotrene
su postojeće opcije i alati koji se koriste u vizualizacijske svrhe. Analizom mogućnosti
i karakteristika sustava i alata, utvrđene su prednosti korištenja takve vrste sustava za
pohranu i analizu IP adresa.

Abstract (english)

The goal of observation and careful analysis of data aggregation and visualization
tools in the context of logs and IP address data is their application in a type of
intelligence work that focuses on protection against cyber threats. In this paper, the
possibilities of using Logstash and Elasticsearch tools for aggregation and analysis of
IP address data obtained from Apache logs are tested, and with the help of Kibana and
Grafana tools, the options and tools used for visualization purposes are observed. By
analyzing the capabilities and characteristics of systems and tools, the advantages of
using such types of storage systems and IP address analysis have been identified.

• Keywords: kibernetičke prijetnje; obavještajni rad; Apache logovi; IP adresa; Grafana; Kibana; Elasticsearch; Logstash
• Keywords (english): intelligence; cyber threats; Apache logs; IP address; Grafana; Kibana; Elasticsearch; Logstash
• Language: croatian
• URN:NBN: urn:nbn:hr:168:216085
• Study programme: Title: Computing; Study programme type: university; Study level: undergraduate; Academic / professional title: sveučilišni/a prvostupnik/ prvostupnica (baccalaureus/baccalaurea) inženjer/inženjerka računarstva (sveučilišni/a prvostupnik/ prvostupnica (baccalaureus/baccalaurea) inženjer/inženjerka računarstva)
• Type of resource: Text
• File origin: Born digital
• Access conditions: Closed access
• Created on: 2023-01-13 14:33:17