Logstash - Output config update for IDS type

This commit is contained in:
Wes Lambert
2018-11-30 13:17:53 +00:00
parent 2695a8e1a7
commit 05accf3017

View File

@@ -9,14 +9,14 @@
# Last Update: 12/9/2016
filter {
if [event_type] == "snort" and "test_data" not in [tags] {
if [event_type] == "ids" and "test_data" not in [tags] {
mutate {
##add_tag => [ "conf_file_9033"]
}
}
}
output {
if [event_type] == "snort" and "test_data" not in [tags] {
if [event_type] == "ids" and "test_data" not in [tags] {
#stdout { codec => rubydebug }
elasticsearch {
hosts => "{{ ES }}"