Loading...
Snort3 live alert feed — WebSocket
⬤ connecting
TimeSensorSIDMessage
Src → DstPri
🔴 Snort3
🔵 Security Onion
🟣 Wazuh
▸ API call
Alerts by Priority
| Time | Sensor | SID | Message |
Src → Dst | Proto | Pri |
| Run a query |
Pipe-delimited ES|QL — FROM, WHERE, STATS, EVAL, SORT, LIMIT, KEEP, DROP, RENAME, DISSECT, GROK
· Agg template
· Filter template
· KQL template
copy
Results
| Run a query to see results |
✎ Edit DSL
▸ Preview DSL
Alerts by Rule Level
| Time | Agent | Lvl | Rule ID | Description | MITRE |
| Run a query |
Tier-scoped — your tier only
| Rank | User | Points | Solves | 🩸 First Bloods |
|---|