network-security-monitoring
A Python implementation of the Community ID flow hashing standard
Read Zeek (Bro) logs into typed Python records; convert to JSON or CSV, map to Elastic Common Schema, load into Elasticsearch.