Snare

-
AWS cloudtrail collection
Add the functionality to collect from AWS cloudtrail and parse aws logs.
1 vote -
Azure event hub collection
Add the functionality to collect from azure event hubs and parse azure logs.
1 vote -
Include Geo-location for generic syslog report type
Please make geo-location data available for generic syslog report type. We have configured a regex token for source IP and it would be nice to display geo info for the field. Thanks.
1 vote -
Have a Snare/Prophecy SNMP OID for outbound traps and polling
It would be helpful to have a Private Enterprise Number (PEN) assigned to Snare and/or Prophecy to identify outbound traps. 24 is a really generic OID to use as default.
Application can be made at: https://pen.iana.org/pen/PenApplication.page
This could populate the trap SNMP OID in the config wizzard, and also be used in the snmpd.conf to identify the polled servers as Snare instead of generic Net-SNMP.
It does not require any changes in design, simple config items.
1 vote -
Possibility to export event search data to pdf or txt or csv
Ability to export data from the event search module to a pdf file or txt file or csv file.
2 votesThank you for sharing this suggestion. This enhancement is in progress with the Snare Development Team to support CSV exporting of search results. Future updates will enhance this to handle PDF and other formats.
Further updates will be provided when the release is being packaged.
-
Add SNMP support to Snare Central
SNMP enabled for query on the Snare Server to monitor health of our Snare server.
3 votesThank you for sharing this suggestion, we will review and reach out to you for further clarification if needed. This enhancement is under review with the Snare Development Team.
-
Allow the Snare Central Server to set FIPS compliance mode
Allow the Snare Central Server to enable FIPS compliance mode. This will restrict all encryption methods to only use they approved encryption algorithms.
1 voteThank you for sharing this suggestion. This enhancement is in progress with the Snare Development Team.
Further updates will be provided when the release is being packaged.
-
Allow selection of columns in Pattern Map Details
Pattern Map Details in reports do not allow selection of columns. Certain fields such as DETAILS and STRING are large and take up a large amount of screen estate.
Although the Tabular details allows inclusion or exclusion of fields the Pattern Map’s details does not allow that customization and shows fields that are not desired.
1 voteThank you for sharing this suggestion, we will review and reach out to you for further clarification if needed. This enhancement is under review with the Snare Development Team.
-
Have option to store logs as uncompressed in Snare Central
Snare Central does not currently have an option to save logs in an uncompressed format.
1 voteThank you for sharing this suggestion, we will review and reach out to you for further clarification if needed. This enhancement is under review with the Snare Development Team.
-
Show how much data is being reflected to a destination on a daily, weekly or monthly type report
Need to show how much data is being reflected in executive reports. The current Snare Central Reflector page only shows a rolling 24 hour volume.
2 votesThank you for sharing this suggestion, we will review and reach out to you for further clarification if needed. This enhancement is under review with the Snare Development Team.
-
Have a multi tenant Snare Central Server in the cloud to send my own events
Have a multi tenant Snare Central server in the cloud to send my own events
1 voteThank you for sharing this suggestion, we will review and reach out to you for further clarification if needed. This enhancement is under review with the Snare Development Team.
- Don't see your idea?