Ross ROSS = Recommend OSS · open-source software intelligence for agents

pfelk/pfelk

pfSense/OPNsense + Elastic Stack observed · 2026-08-28

github.com/pfelk/pfelk · homepage · Shell · NOASSERTION (other) observed · 2026-08-28

Health v2 · maintenance only

47/100

  • Activity 54
  • Release rhythm 8
  • Longevity 100

Flags: no_license

How is this computed?

round(0.45*activity + 0.35*rhythm + 0.20*longevity); archived -> min(score, 10) — computed 2026-09-03. Adoption (stars, forks) is never an input.

  • gap_med: n/a
  • age_days: 3226
  • days_rel: 590
  • days_push: 278
  • n_releases_24m: 1

Full methodology

Adoption not part of the score

1223 stars · 199 forks observed · 2026-08-28

What it is AI-extracted, prompt v1, taxonomy v1, 2026-08-30, confidence not recorded

pfelk is an open-source deployment toolkit that integrates pfSense/OPNsense firewall logs with the Elastic Stack (Elasticsearch, Logstash, Kibana) for ingestion, enrichment, search, and visualization. It ships prebuilt Logstash pipelines and Kibana dashboards for firewall traffic, VPN, DNS, IDS/IPS, proxy, and related log sources, deployable via docker-compose, Ansible, or scripts.

Use cases

  • visualize pfsense firewall logs with kibana dashboards
  • centralize opnsense logs in elasticsearch
  • build a home lab siem for firewall traffic
  • analyze suricata and snort ids alerts
  • monitor openvpn and unbound dns logs
  • search firewall logs in near real time

When to choose

  • you run pfSense or OPNsense and want rich search and dashboards beyond the built-in web UI
  • you want a self-hosted SIEM-style view of firewall, VPN, DNS, and IDS logs
  • you prefer docker-compose or Ansible-based deployment of the Elastic Stack

When to avoid

  • you don't use pfSense or OPNsense as your firewall
  • you lack the recommended hardware (8GB+ RAM, ideally 32GB)
  • you need a lightweight log viewer rather than a full Elastic Stack deployment

Facets

application · maturity active

monitoring logging data-visualization search-engine analytics security networking monitoring self-hosted self-hosted cli pfsense opnsense elk-stack logstash kibana siem firewall-logs log-ingestion network-traffic-analysis devops linux docker

2 sources

Member repositories

RepositoryRoleHealth v2
pfelk/pfelkmain47

For agents

markdown · JSON · MCP: product_card(name="pfelk/pfelk")

Data as of 2026-08-30T08:39:29.467469+00:00 · Report a problem