Output Tools
6 projects
suricata-kafka-outputA Suricata plugin that outputs Eve JSON events to Apache Kafka for real-time network security monitoring.
suricata-redis-outputA Suricata output plugin that writes Eve JSON events to Redis without blocking the main thread.
MeerA lightweight C-based data broker that enriches and forwards Suricata/Sagan EVE JSON data to various output destinations.
FEVERA fast, extensible event router for processing Suricata's JSON EVE output, designed for high-throughput network security monitoring.
Suricata-Logstash-TemplatesKibana 3 dashboard templates for visualizing Suricata IDS/IPS logs in Logstash/ELK stack.
LilithA Perl tool that ingests EVE JSON logs from Suricata and Sagan into PostgreSQL for structured querying and analysis.
Operations, Monitoring and Troubleshooting
9 projectsslinkwatchA tool to dynamically maintain Suricata's network interface configuration based on link status and assign detection threads via weighted allocation.
suri-statsMauerspechtA probing tool that generates controlled network traffic to verify if security sensors are receiving all relevant traffic in corporate networks.
ansible-suricataAnsible role for deploying Suricata IDS/IPS from stretch-backports on Debian 9 systems.
MassDeploySuricataAnsible-based automation for mass deployment and updates of Suricata intrusion detection and prevention systems.
docker-suricataA Docker image for Suricata, enabling easy deployment of the network intrusion detection and prevention system.
Suricata-MonitoringA LibreNMS JSON SNMP extend and Nagios-style check for monitoring Suricata intrusion detection system statistics.
Terraform Module for SuricataTerraform module to deploy Suricata IDS with Google Cloud packet mirroring for network traffic inspection.
suricata_exporterA Prometheus exporter that collects and exposes Suricata IDS/IPS metrics via a Unix socket for monitoring and visualization.
Programming Libraries and Toolkits
6 projectsrust-suricatax-rule-parserAn experimental Rust parser for Suricata rules that converts them into structured JSON/YAML representations.
go-suricataA Go client library for interacting with Suricata's Unix socket to execute commands and retrieve data.
gonidsA Go library for parsing and manipulating Snort and Suricata IDS/IPS rules with Suricata compatibility focus.
surevego
suricataparserA pure Python parser and generator for Snort and Suricata intrusion detection rules.
py-idstools