THE page details a recent update to the DShield SIEM, announced by Guy Bruneau. Published on July 14, 2026, it introduces ELK stack version 8.19.15, additional dashboards, and two new data collection features: TTY logs and Suricata event logs. TTY logs are collected daily, base64 encoded, and parsed upon upload, enabling monitoring of activities within the DShield sensor. The Suricata integration enhances logging capabilities.
The update includes a revamped dashboard with shared queries and a threat map for visualizing traffic. A workshop at SANSFIRE 2026 is also announced, encouraging onsite participation.