I would like to view ntopng logs in a more visible and sorted way

Networking & Firewalls
1

Nice to meet you, I came from a video on Youtube explaining PFSense. I’m very pleased to meet you.

I didn’t know that ntopng could be used with PFSense and I’m very happy that it’s so easy to use. However, I am wondering if it would be possible to view the logs by the site that ntopng identifies.

For example, when looking at LiveFlows, the application says TLS.Youtube, but I would like to exclude this communication from log viewing. Reading articles on the internet, it also says to use Kibana etc., but I would like to know what steps to take to output the logs and how I can integrate with external services. Thank you for providing such a place. Best regards.

2

This is not something I have setup so I don’t have any guides for it.

3

Thank you. I wish I could sort a bit easier, but I will ask in other directions, there was an article about using Splunk as well, but I read it a long time ago and I have a hazy memory of it.

4

I have looked at the Netgate forums, but there does not appear to be a facility to send logs from ntopng itself. In the logs, data was sent to Splunk for analysis using the PFSense remote log transfer function. So I will proceed in the direction he suggested. Thank you.