RANCANG BANGUN DAN EVALUASI EFEKTIVITAS SURICATA DENGAN GRAFANA PADA DATA CENTER INTERNAL PTIPDNIM.: 22106050006Mochammad Cah Anugrah GustiauthorPTIPD UIN Sunan Kalijaga network faces application-layer (Layer 7) security blindspots due to limited Deep Packet Inspection (DPI) on commercial edge firewalls and a lack of visibility into Inter-VLAN lateral movement (East-West traffic). This study designs and implements a Suricata-based Intrusion Detection System (IDS) integrated with a resourceefficient Promtail, Loki, and Grafana (PLG) observability stack using a staged two-Virtual Machine architecture. The methodology integrates the Network Development Life Cycle (NDLC), the Penetration Testing Execution Standard (PTES), and the MITRE ATT&CK framework. Simulations were executed in an isolated Docker Bridge Network, while realworld traffic was monitored via the ENS interface reading Core Switch syslog. System effectiveness was evaluated using a Confusion Matrix against 17 data points over four testing days. Controlled testing demonstrated 100% Precision, Recall, and Accuracy across 16 True Positive sessions, with zero False Positives or False Negatives. The developed Custom Rules contributed to 62.5% of total detections, enabling exclusive detection of lateral movement patterns uncovered by public rulesets.005.12 Software System Analysis and Design/Sistem Analisa dan Desain Perangkat Lunak2026-08-13UIN SUNAN KALIJAGA YOGYAKARTA;FAKULTAS SAINS DAN TEKNOLOGIThesis