Maybe it's me but I know how to set up FOSS based logging, web servers, databases data lakes and the kitchen sink. But intrusion detection systems seem to be s

Maybe it's me but I know how to set up FOSS based logging, web servers, databases data lakes and the kitchen sink. But intrusion detection systems seem to be something that passed me by or is not well known. I mean Inremeber setting up tripwire databases back in the day but Inwas wondering what is state of the art in IDS these days in the FOSS world?