Metron integrates a variety of open source big data technologies in order to offer a centralized tool for security monitoring and analysis. Metron provides capabilities for log aggregation, full packet capture indexing, storage, advanced behavioral analytics and data enrichment, while applying the most current threat intelligence information to security telemetry within a single platform.
 
Metron will provide next generation defense techniques that consists of using a class of anomaly detection and machine learning algorithms that can be applied in real-time as events are streaming in.

Metron integrates a variety of open source big data technologies in order to offer a centralized tool for security monitoring and analysis. Metron provides capabilities for log aggregation, full packet capture indexing, storage, advanced behavioral analytics and data enrichment, while applying the most current threat intelligence information to security telemetry within a single platform.

Apache Metron - Real-time Big Data Security 

Graphite is an enterprise-scale monitoring tool that runs well on cheap hardware. It is a highly scalable real-time graphing system. It stores numeric time-series data and renders graphs of this data on demand. 

Graphite - A highly scalable real-time graphing system

Prometheus is a systems and service monitoring system. It collects metrics from configured targets at given intervals, evaluates rule expressions, displays the results, and can trigger alerts if some condition is observed to be true.

Prometheus - Service Monitoring System and Time Series Database

GoAccess is an open source real-time web log analyzer and interactive viewer that runs in a terminal on *nix systems or through your browser. It provides fast and valuable HTTP statistics for system administrators that require a visual server report on the fly. It supports nearly all web log formats (Apache, Nginx, Amazon S3, Elastic Load Balancing, CloudFront, etc) 

GoAccess - Real-time web log analyzer and interactive viewer that runs in a terminal in *nix systems or through your browser

LinDB is an open-source Time Series Database which provides high performance, high availability and horizontal scalability. LinDB takes a lot of best practice of TSDB and implements some optimizations based on the characteristics of time series data. Unlike writing a lot of Continuous-Query for InfluxDB, LinDB supports rollup in specific interval automatically after creating the database. Moreover, LinDB is extremely fast for parallel querying and computing of distributed time series data.
 
LinDB supports Metric + Tags + Fields, and is schema-free; The LinQL is handy for realtime data analytics. Tags based sharding strategy in LinDB solves the hotspots problem, and is truly horizontally expanded available by simply adding new broker and storage nodes.

LinDB is an open-source Time Series Database which provides high performance, high availability and horizontal scalability. LinDB takes a lot of best practice of TSDB and implements some optimizations based on the characteristics of time series data. Unlike writing a lot of Continuous-Query for InfluxDB, LinDB supports rollup in specific interval automatically after creating the database. Moreover, LinDB is extremely fast for parallel querying and computing of distributed time series data.


Lindb - Distributed Time Series Database

Heroic is a scalable time series database based on Bigtable, Cassandra, and Elasticsearch.  It is an open-source monitoring system originally built at Spotify to address the problems that were facing with large scale gathering and near real-time analysis of metrics. 

Heroic - The Time Series Database

ZMap is an open-source network scanner that enables researchers to easily perform Internet-wide network studies. With a single machine and a well provisioned network uplink, ZMap is capable of performing a complete scan of the IPv4 address space in under 45 minutes, approaching the theoretical limit of gigabit Ethernet. ZMap can be used to study protocol adoption over time, monitor service availability, and help us better understand large systems distributed across the Internet.

Zmap - The Internet Scanner

Alert dashboard for Prometheus Alertmanager. Alertmanager UI is useful for browsing alerts and managing silences, but it's lacking as a dashboard tool - unsee aims to fill this gap. Starting with 0.7.0 release it can also aggregate alerts from multiple Alertmanager instances, running either in HA mode or separate. Duplicated alerts are deduplicated so only unique alerts are displayed. Each alert is tagged with names of all Alertmanager instances it was found at and can be filtered based on those tags.

Unsee - Alert dashboard for Prometheus Alertmanager

Hawkular Metrics is a metrics collection, aggregation, visualization framework. Hawkular is a set of Open Source projects designed to be a generic solution for common monitoring problems. The Hawkular projects provide REST services that can be used for all kinds of monitoring needs. The aim is to provide a generic solution that can be used for common monitoring problems.
 
The main goal of the Hawkular organization is to provide tools to monitor, view, predict, and guide you to make informed decisions about deployed applications and infrastructure. Anyone looking for Java-based components for alerting, metric storage, or distributed tracing should be interested in Hawkular.

Hawkular Metrics is a metrics collection, aggregation, visualization framework. Hawkular is a set of Open Source projects designed to be a generic solution for common monitoring problems. The Hawkular projects provide REST services that can be used for all kinds of monitoring needs. The aim is to provide a generic solution that can be used for common monitoring problems.


Hawkular metrics - Time Series Metrics Engine based on Cassandra

Carbon is a PowerShell module for automating the configuration of computers running Windows 7, 8, 2008, and 2012. It can configure and manage: Local users and groups, IIS websites, virtual directories, and applications File system, registry, and certificate permissions, Certificates Privileges, Services, Encryption, Junctions, Hosts file, INI files, Performance counters, Shares, .NET connection strings and app settings And much more!

Carbon - PowerShell module for automating the configuration and setup of Windows workstations and servers.

Discover open source projects across all platforms

Projects