Virtualization is ubiquitous in the IT world. However, with the ever-increasing complexity, we are faced with the fact that our old tools are insufficient nowadays. That is why we need to accustom ourselves to diverse types of NetFlow configuration. ...

Since Ubuntu 16.04 is approaching its end-of-life (you can, of course, extend it with ESM though that's another story), there is a need to keep your system up-to-date. Unlike CentOS and Red Hat, which don't support in-place upgrades, Ubuntu (and Debi...

Usually, our customers configure NetFlow export directly on their devices (routers, switches, firewalls, etc). But in case the company policy (especially in Asian countries) prevents enabling export on devices, or if devices are not capable of export...

NetVizura is a complex software composed of a few databases, Tomcat, and a lot of code, supported on Windows and numerous Linux distributions for AMD64 architecture. With the advent of 8GB RAM RPI 4, there have been numerous projects using this versi...

OPNsense is an open-source, FreeBSD-based firewall distro. It provides a modern GUI and numerous plugins. A great plus is its ease of use, in contrast to some other open-source firewalls in the past. Also, OPNsense is a fork of Pfsense (we ...

NetVizura already has good Active Directory End Users integration - you can forward your logs from AD DC into NetVizura, and then correlate these login data with NetFlow data from your exporters. The result is a much better insight into the state of ...

The Elasticsearch upgrade process is somewhat straightforward. Download the upgrade, apply it, and then restart the Elasticsearch service. However, in NetVizura we are not using elastic-licensed Elasticsearch but apache-licensed installation. Elastic...

NoSQL databases differ in almost every aspect when compared to traditional RDBMS. While classic DBs (such as PostgreSQL) have, for example, dumps, Elasticsearch has the snapshotting capability that can be good in some cases but overwhelming in others...

Sometimes we want to limit the availability of the NetVizura application and add additional security layers. Reverse proxy and SSL configuration are here to ensure this. A reverse proxy is an application that forwards requests from client to server, ...

Elasticsearch is a NoSQL database, usually used as a search engine. However, with its powerful logic, it can be used for pretty much anything. In our case, we have used Elasticsearch to hold aggregated NetFlow data. As we are incorporating it step by...