News for hackers. Stuff that matters.

A comment on Show HN: Open-source serverless security lake powered by Rust + Apache Iceberg.

Re:Show HN: Open-source serverless security lake powered by ... by iJohnDoe on Saturday August 06, 2022 @11:05PM (#32373516)
This sounds very appealing.

Our IDS solution outputs zeek/suricata info to s3 as dns.1234.log.gz, http.1234.log.gz, etc.

Can these files be handled automatically?

[ Parent | on HN ]
Re:Show HN: Open-source serverless security lake powered by ... by shaeqahmed on Monday August 08, 2022 @03:18AM (#32383084)
Yes, they would be handled automatically. Data ingestion is supported through S3 or Kafka, where files are picked up and ETL'D into structured Iceberg tables conforming to an ECS-like schema.

Feel free to join our Discord, happy to walk you through the steps and learn about your use case.

[ Parent | on HN ]