)]}'
{"security-guide/source/monitoring-logging/case-studies.rst":[{"author":{"_account_id":6547,"name":"Andreas Jaeger","email":"jaegerandi@gmail.com","username":"jaegerandi"},"change_message_id":"c5f8f47067d23eb3b0432d5bb52cb71f5f4f5b2b","unresolved":false,"context_lines":[{"line_number":51,"context_line":"external requests, and more. To aide the SOC he configures an"},{"line_number":52,"context_line":"Elastic, Logstash, and Kibana (ELK) cluster to collect, correlate and"},{"line_number":53,"context_line":"identify security events. Bob\u0027s team also builds out a Django based web"},{"line_number":54,"context_line":"application for his customers to perform self-service log retrieval from"},{"line_number":55,"context_line":"the Logstash systems. He does not allow user requests and ensures tenant"},{"line_number":56,"context_line":"validation so that tenants only have access to their own log events."},{"line_number":57,"context_line":"Finally, Bob configures an NTP server to ensure all events maintain a"}],"source_content_type":"text/x-rst","patch_set":2,"id":"3a29b11f_83d97a24","line":54,"updated":"2015-10-21 19:04:56.000000000","message":"We always talk about Bob, why introduce the team here? Does not fit into the rest of the narration...","commit_id":"4db75bc9225850d0623d044558aa53ee1e19b939"},{"author":{"_account_id":10670,"name":"Michael McCune","email":"elmiko@redhat.com","username":"mimccune"},"change_message_id":"da956862949639699cf651bc66169d635326a79c","unresolved":false,"context_lines":[{"line_number":48,"context_line":"\"anyone with a credit card\" he wants to have a well-defined policy in"},{"line_number":49,"context_line":"place for issues that may arise. He outlines how SOC analysts can"},{"line_number":50,"context_line":"respond to malicious traffic detection, instances being compromised,"},{"line_number":51,"context_line":"external requests, and more. To aide the SOC he configures an"},{"line_number":52,"context_line":"Elastic, Logstash, and Kibana (ELK) cluster to collect, correlate and"},{"line_number":53,"context_line":"identify security events. Bob also builds a Django based web application"},{"line_number":54,"context_line":"for his customers to perform self-service log retrieval from the"}],"source_content_type":"text/x-rst","patch_set":3,"id":"da85f559_d51c6715","line":51,"updated":"2015-11-09 19:58:13.000000000","message":"should this be \"aid\" instead of \"aide\"?","commit_id":"c40d9f2723aa218101254789d0540d8cc7895c3c"},{"author":{"_account_id":12325,"name":"Nathaniel Dillon","email":"nathaniel.dillon@alumni.depaul.edu","username":"sicarie"},"change_message_id":"90e5fbaa1f3ac8ae563bcebb74baa00969b08a96","unresolved":false,"context_lines":[{"line_number":48,"context_line":"\"anyone with a credit card\" he wants to have a well-defined policy in"},{"line_number":49,"context_line":"place for issues that may arise. He outlines how SOC analysts can"},{"line_number":50,"context_line":"respond to malicious traffic detection, instances being compromised,"},{"line_number":51,"context_line":"external requests, and more. To aide the SOC he configures an"},{"line_number":52,"context_line":"Elastic, Logstash, and Kibana (ELK) cluster to collect, correlate and"},{"line_number":53,"context_line":"identify security events. Bob also builds a Django based web application"},{"line_number":54,"context_line":"for his customers to perform self-service log retrieval from the"}],"source_content_type":"text/x-rst","patch_set":3,"id":"da85f559_48e18dfd","line":51,"in_reply_to":"da85f559_d51c6715","updated":"2015-11-10 15:36:36.000000000","message":"Only if you want to spell \"correctly\" :)","commit_id":"c40d9f2723aa218101254789d0540d8cc7895c3c"},{"author":{"_account_id":10670,"name":"Michael McCune","email":"elmiko@redhat.com","username":"mimccune"},"change_message_id":"da956862949639699cf651bc66169d635326a79c","unresolved":false,"context_lines":[{"line_number":49,"context_line":"place for issues that may arise. He outlines how SOC analysts can"},{"line_number":50,"context_line":"respond to malicious traffic detection, instances being compromised,"},{"line_number":51,"context_line":"external requests, and more. To aide the SOC he configures an"},{"line_number":52,"context_line":"Elastic, Logstash, and Kibana (ELK) cluster to collect, correlate and"},{"line_number":53,"context_line":"identify security events. Bob also builds a Django based web application"},{"line_number":54,"context_line":"for his customers to perform self-service log retrieval from the"},{"line_number":55,"context_line":"Logstash systems. He does not allow user requests and ensures tenant"}],"source_content_type":"text/x-rst","patch_set":3,"id":"da85f559_55d71723","line":52,"updated":"2015-11-09 19:58:13.000000000","message":"s/Elastic,/Elasticsearch,/","commit_id":"c40d9f2723aa218101254789d0540d8cc7895c3c"},{"author":{"_account_id":12325,"name":"Nathaniel Dillon","email":"nathaniel.dillon@alumni.depaul.edu","username":"sicarie"},"change_message_id":"90e5fbaa1f3ac8ae563bcebb74baa00969b08a96","unresolved":false,"context_lines":[{"line_number":49,"context_line":"place for issues that may arise. He outlines how SOC analysts can"},{"line_number":50,"context_line":"respond to malicious traffic detection, instances being compromised,"},{"line_number":51,"context_line":"external requests, and more. To aide the SOC he configures an"},{"line_number":52,"context_line":"Elastic, Logstash, and Kibana (ELK) cluster to collect, correlate and"},{"line_number":53,"context_line":"identify security events. Bob also builds a Django based web application"},{"line_number":54,"context_line":"for his customers to perform self-service log retrieval from the"},{"line_number":55,"context_line":"Logstash systems. He does not allow user requests and ensures tenant"}],"source_content_type":"text/x-rst","patch_set":3,"id":"da85f559_c8ffbda8","line":52,"in_reply_to":"da85f559_55d71723","updated":"2015-11-10 15:36:36.000000000","message":"I believe the name changed recently - while it is still Elasticsearch colloquially, the formal name is Elastic (I think)","commit_id":"c40d9f2723aa218101254789d0540d8cc7895c3c"}]}