Update Zeek and Strelka

This commit is contained in:
Wes Lambert
2020-04-01 19:11:10 +00:00
parent 1df2302287
commit 09022ad752

View File

@@ -9,11 +9,12 @@
output {
if "osquery" in [tags] {
if [module] =~ "osquery" {
elasticsearch {
pipeline => "%{module}.%{dataset}"
hosts => "{{ ES }}"
index => "so-osquery-%{+YYYY.MM.dd}"
template => "/so-common-template.json"
}
}
}
}