jasonish/evebox 0.3.0

EveBox v0.3.0

on GitHub

Depends on Elastic Search 1.3.0+.

• Use Groovy for Elastic Search scripting. Works with the default configuration now (no need to enable dynamic scripting).
• Use the new top hits aggregation in ES 1.3 to limit the number of trips to the ES to build an aggregate view.
• Display packet and payload data now available in Suricata eve logs (Only in Suricata git builds as of now).