Hello,

We currently have a multi-sensor deployment of security onion. Each of those sensors feeds into a primary.

It seems that Trisul wants to be deployed on each of the SO sensors, too, unless I just want netflow data (which I don't). If I did deploy it on each of our sensors, what options would I have for viewing all of the relevant data from a single website?

Thanks in advance for thoughts on the topic