Install Third Party Integration

[brazorfajeje]

Is it possible to install integrations not listed in https://docs.securityonion.net/en/2.4/third-party-integrations.html#supported-integrations but available for elastic https://www.elastic.co/docs/current/integrations ?

[InfosecGoon]

What particular integration are you interested in?

[SilentEarth3]

Hi, not to hijack this thread, but I have the exact same question. How about this integration?

https://www.elastic.co/docs/current/integrations/network_traffic

I have a specific use case where an Elastic Agent deployed from Security Onion is on a host where I want to monitor some of the network traffic at the host, but cannot tap the whole network segment it's on.

Or how about this one to monitor DNS transactions at a host (a DC)?

https://www.elastic.co/docs/current/integrations/microsoft_dnsserver

[brazorfajeje]

In my case was Cybereason integration https://www.elastic.co/guide/en/integrations/current/cybereason.html
but in general I would be interested in understanding how to handle the possibility of other integrations not supported directly by the development team