CSEC_PUBLIC/securityonion
1
0
Fork 0
mirror of https://github.com/Security-Onion-Solutions/securityonion.git synced 2026-04-27 06:57:50 +02:00
Code Issues Packages Projects Releases Wiki Activity

Logstash - Output config update for IDS type

Browse Source
This commit is contained in:
Wes Lambert
2018-11-30 13:17:53 +00:00
parent 2695a8e1a7
commit 05accf3017
1 changed files with 2 additions and 2 deletions
Download Patch File Download Diff File Expand all files Collapse all files
salt/logstash/files/dynamic/9033_output_snort.conf
+2 -2
View File
@@ -9,14 +9,14 @@
# Last Update: 12/9/2016 # Last Update: 12/9/2016
filter { filter {
if [event_type] == "snort" and "test_data" not in [tags] { if [event_type] == "ids" and "test_data" not in [tags] {
mutate { mutate {
##add_tag => [ "conf_file_9033"] ##add_tag => [ "conf_file_9033"]
} }
} }
} }
output { output {
if [event_type] == "snort" and "test_data" not in [tags] { if [event_type] == "ids" and "test_data" not in [tags] {
#stdout { codec => rubydebug } #stdout { codec => rubydebug }
elasticsearch { elasticsearch {
hosts => "{{ ES }}" hosts => "{{ ES }}"