Feature : statistics collected with ELK

[M4t3o]

Hi,
i work with maldet over multiple servers in a hosting company.
The idea is centralize reports and be able to get some stats.
This feature should be usefull for many people.
Would you want to integrate it by default ?

[fernandodebrando]

How is this feature going, will it come in any version? I am interested in integrating with ELK.

[rfxn]

Closing — the ELK integration approach here has implementation issues (one TCP connection per hit, unquoted variables, IFS corruption, plaintext JSON via raw netcat in the email template file) that make it unsuitable for merging. For centralized scan statistics, the recommended approach is to use Filebeat or Logstash to ship LMD's structured event_log and scan session files to Elasticsearch — this requires no code changes to LMD itself and provides proper TLS, buffering, and retry logic. Thank you for the idea.