> For the complete documentation index, see [llms.txt](https://simon-6.gitbook.io/simoncyber/llms.txt). Markdown versions of documentation pages are available by appending `.md` to page URLs; this page is available as [Markdown](https://simon-6.gitbook.io/simoncyber/cyber/untitled/readme.md).
# SIEM-Splunk-Elk-Stack-Set-Up
This is my first time doing a larger scale homelab so bare with me at some times. TEST TEST TEST The first thing I did was to plan it all out in Cisco Packet Tracer. I planned the subnets, the device topology, and the overall strucuture of this home lab. All external internet will be passed by OPNSense (basically a firewall) and then processed by 2 hosts. The other are two servers, a Ubuntu Server for SIEM/Splunk, and a AD Windows server. And the last one is actually a Kali Linux machine, hopefully used to do some pentesting or just general exploitation.
* The firewall is pfSense but i changed it to OPNSense since i struggled in making it work
Next, was basically the hardest part. It was to set up the devices itself in VMware. It was an actual pain to set all of these up to be working, but since it isn't too relevant I won't go too deep. For the endhosts, like Kali Linux, Ubunutu Desktop, and Windows 10, it was relatively straightfoward. However, the pfSesne (firewall) was an absolute nightmare to set up.
Kali Linux
* I followed this tutorial on how to install Kali: . It was simple enough, and I connected on "LAN Segment 1" in VMware.
* (Also if you're following along make sure to do this action)
Ubuntu SIEM
* I followed this tutorial: ""
* the password is kali, username is server
Windows Server 2022
* Password kali4321!
OPNSense 
* I put "1.1.1.1" as the name server
Then
Setting up Active Directory in Windows Server 2022
   I gave the domain name of "server.org" with a DSRM password of kali4321!   