EveBox

• Free and open-source web-based interface for managing and analyzing Suricata security events.
• Provides a centralized dashboard for viewing Suricata alerts and network security events.
• Supports Suricata EVE JSON event data for monitoring and security analysis.
• Provides event search, filtering, and classification capabilities for investigating security alerts.
• Displays detailed information about Suricata alerts, including signatures, severity, source, destination, and network details.
• Supports alert acknowledgment and status management to help track investigated security events.
• Provides event and alert visualization through a modern web-based interface.
• Supports SQLite and external database backends for storing and querying security events.
• Can be integrated with Suricata deployments to provide a convenient interface for reviewing EVE JSON logs.
• Can be deployed on Linux servers and integrated with existing security monitoring infrastructure.
• Suitable for security operations teams, network administrators, cybersecurity labs, organizations, and Suricata-based IDS/IPS environments.

EveBox Usage:

$ sudo su

$ cd /opt/evebox

# Check the installed EveBox version

$ evebox --version

# Check the EveBox binary location

$ which evebox

# Check the EveBox systemd service status

$ systemctl status evebox --no-pager

# Check whether EveBox is enabled at system startup

$ systemctl is-enabled evebox

# Check whether EveBox is currently running

$ systemctl is-active evebox

# Check EveBox listening ports

$ ss -lntp | grep evebox

# Check EveBox service logs

$ journalctl -u evebox -n 50 --no-pager

# Follow EveBox service logs

$ journalctl -u evebox -f

# Check the installed EveBox package

$ dpkg -l | grep evebox

# Check the EveBox binary version

$ /usr/bin/evebox --version

Disclaimer:

EveBox is an open-source project maintained by its community of contributors. This content is provided for informational purposes only. We are not affiliated with or endorsed by the EveBox project maintainers. All trademarks, logos, and product names are the property of their respective owners.