理解suricata.eve.timestamp

• Overview

  From Elasticsearch, suricata.eve.timestamp is one field name.

• Suricata

  Suricata is an open source-based intrusion detection system (IDS) and intrusion prevention system (IPS).

  It was developed by the Open Security Foundation (OSF).

  Suricata is a free and open-source, mature, fast and robust network threat detection engine.

  The Suricata engine is capable of real time intrusion detection (IDS), inline intrusion prevention (IPS), network security monitoring (NSM) and offline pcap processing.

• EVE J