ZStreams

Zeek + Kafka + Spark + KSQL = ZStreams

ZStreams helps you analyze Zeek data with the latest streaming toolkits. With ZStreams you can quickly and easily start analyzing Zeek output with examples that help lead you through the some of the fairly steep learning curves for Kafka, KSQL, and Spark.

Pre-Setup for ZStreams

• Zeek with Kafka Plugin: If this isn't already setup then you'll need to install the Zeek Kafka plugin/package, see our help guide here: Kafka_Setup

• Kafka Broker/KSQL: If you don't already have this I highly recommend using the Confluent/Kafka 'all-in-one' docker setup... conveniently available in the ZStreams repo...

  $ git clone git@github.com:SuperCowPowers/zstreams.git
  $ cd zstreams/docker
  $ docker-compose up -d
  

Install ZStreams

$ pip install zstreams

Examples

Welcome to the examples, before getting started let's make sure that everything is setup and ready to go: Ready Check, All Systems Go?

Hello World

• (1)
• (2)

Novice

• (1)
• (2)

Intermediate

• (1)
• (2)

Expert

• (1)
• (2)