pfSense

Chronicle supports ingesting pfSense telemetry logs to help visualize network traffic for and surrounding alerts

Chronicle Data Types

• DHCP
• DNS
• Firewall

Configuration

Reference: https://docs.netgate.com/pfsense/en/latest/monitoring/copying-logs-to-a-remote-host-with-syslog.html

1. Click Status > System Logs
2. Click the Settings tab
3. Check Enable syslog’ing to remote syslog server
4. Type the IP of your CYCLOPS appliance in the box next to Remote syslog server
5. CYDERES recommends checking the boxes for all log entries to forward
6. Click Save