Requirements

For Integrating BloxOne Threat Defense Data

The following items are required to incorporate Infoblox BloxOne Threat Defense DNS security data into Elastic Stack:

• Access to an Infoblox BloxOne Threat Defense subscription

• Access to an Elastic Stack instance 

  • Composed of Elasticsearch, Logstash and Kibana

For Integrating NIOS dnstap Logs

The following items are required to incorporate NIOS dnstap for high-performance query logging into Elastic Stack:

• A NIOS Grid with dnstap enabled

• Access to an Elastic Stack instance 

  • Composed of Elasticsearch, Logstash and Kibana

• A dnstap receiver to read and translate dnstap logs from NIOS