# Web GUI's

**URL:** <https://community.zeek.org/t/web-guis/3257>\
**Category:** Zeek\
**Created:** [September 5, 2014, 12:54pm UTC](https://community.zeek.org/t/web-guis/3257 "2014-09-05T12:54:09Z")\
**Posts on this page:** 7\
**Page:** 1

<div class="post-metadata">

**Author:** ![Yardley\_Tim](https://avatars.discourse-cdn.com/v4/letter/y/94ad74/32.png) [@Yardley\_Tim](https://community.zeek.org/u/Yardley_Tim)\
**Post date:** [September 5, 2014, 12:54pm UTC](https://community.zeek.org/t/web-guis/3257/1 "2014-09-05T12:54:09Z")

</div>

All,

I’m curious as to what people use as a GUI for Bro in production. I’m aware that there are a few options out there, but I’d like to know what the consensus is on preferred approach.

Items I am interested in…

Bro administration  
Bro dashboard  
Bro log details/analysis  
Bro policy definition  
Etc.

Appreciate your thoughts!

Tim

---

<div class="post-metadata">

**Author:** ![Seth\_Hall3](https://avatars.discourse-cdn.com/v4/letter/s/d6d6ee/32.png) [@Seth\_Hall3](https://community.zeek.org/u/Seth_Hall3)\
**Post date:** [September 5, 2014, 1:13pm UTC](https://community.zeek.org/t/web-guis/3257/2 "2014-09-05T13:13:44Z")

</div>

There is no existing GUI for most of this. The only one that people have really approached is in log analysis and most people use splunk for those, although some people are starting to use ElasticSearch with Kibana for that.

&nbsp;&nbsp;.Seth

---

<div class="post-metadata">

**Author:** ![Doug\_Burks](https://avatars.discourse-cdn.com/v4/letter/d/ee7513/32.png) [@Doug\_Burks](https://community.zeek.org/u/Doug_Burks)\
**Post date:** [September 5, 2014, 1:20pm UTC](https://community.zeek.org/t/web-guis/3257/3 "2014-09-05T13:20:14Z")

</div>

Many folks use ELSA as well.

---

<div class="post-metadata">

**Author:** ![Slagell\_Adam\_J](https://avatars.discourse-cdn.com/v4/letter/s/e9c0ed/32.png) [@Slagell\_Adam\_J](https://community.zeek.org/u/Slagell_Adam_J)\
**Post date:** [September 5, 2014, 1:24pm UTC](https://community.zeek.org/t/web-guis/3257/4 "2014-09-05T13:24:16Z")

</div>

This is not an endorsement of anything, but we use Splunk and there is:  
[https://github.com/grigorescu/Brownian](https://github.com/grigorescu/Brownian)  
[http://opensecgeek.blogspot.com/2013/02/nsm-with-bro-ids-part-4-bro-and-elsa.html](http://opensecgeek.blogspot.com/2013/02/nsm-with-bro-ids-part-4-bro-and-elsa.html)

But these do nothing for administration of Bro. Though I could see as we daemonize broctl someone writing a nice web interface for that for Bro 2.4.

---

<div class="post-metadata">

**Author:** ![Seth\_Hall3](https://avatars.discourse-cdn.com/v4/letter/s/d6d6ee/32.png) [@Seth\_Hall3](https://community.zeek.org/u/Seth_Hall3)\
**Post date:** [September 5, 2014, 1:34pm UTC](https://community.zeek.org/t/web-guis/3257/5 "2014-09-05T13:34:16Z")

</div>

Don't forget:  
&nbsp;&nbsp;[http://brownian.bro.org/](http://brownian.bro.org/)

&nbsp;&nbsp;.Seth

---

<div class="post-metadata">

**Author:** ![Hosom\_Stephen\_M](https://avatars.discourse-cdn.com/v4/letter/h/d26b3c/32.png) [@Hosom\_Stephen\_M](https://community.zeek.org/u/Hosom_Stephen_M)\
**Post date:** [September 5, 2014, 1:37pm UTC](https://community.zeek.org/t/web-guis/3257/6 "2014-09-05T13:37:10Z")

</div>

Depending on what 'administration' consists of, some users have written Web UIs to perform some tasks. For example, we have an in-house Django app that generates intelligence files. Justin has a Django app that generates generic tables for Bro. His would include the intel file use case, but was not as user friendly as I needed.

---

<div class="post-metadata">

**Author:** ![system](https://canada1.discourse-cdn.com/flex011/uploads/zeek/original/1X/f09d732bc2cc7c7cc7e35db67cf4e1d5233ce7a7.png) [@system](https://community.zeek.org/u/system)\
**Post date:** [May 6, 2022, 3:42pm UTC](https://community.zeek.org/t/web-guis/3257/7 "2022-05-06T15:42:03Z")

</div>


