Create enterprise monitoring at home with Zeek and Elk (Part 1)

This post is a step-by-step tutorial demonstrating how to deploy Zeek on an Ubuntu VM (hosted in VMware ESXi) and integrate it into a monitoring pipeline for later ingestion into the ELK stack; it covers prerequisites, network mirror configuration, enabling promiscuous mode, installing and configuring Zeek, and verifying collected logs, with a promise to cover ELK deployment in part 2.