CSEC_PUBLIC/securityonion
1
0
Fork 0
mirror of https://github.com/Security-Onion-Solutions/securityonion.git synced 2025-12-07 01:32:47 +01:00
Code Issues Packages Projects Releases Wiki Activity

Change numbers for Logstash

Browse Source
This commit is contained in:
Wes
2024-02-01 14:01:55 +00:00
parent 182667bafb
commit 1818e134ca
2 changed files with 20 additions and 20 deletions
Download Patch File Download Diff File Expand all files Collapse all files

20
salt/logstash/defaults.yaml
View File

@@ -43,7 +43,7 @@ logstash:
custom3: [] custom3: []
custom4: [] custom4: []
pipeline_config: pipeline_config:
custom01: |- custom001: |-
filter { filter {
if [event][module] =~ "zeek" { if [event][module] =~ "zeek" {
mutate { mutate {
@@ -51,15 +51,15 @@ logstash:
} }
} }
} }
custom02: PLACEHOLDER custom002: PLACEHOLDER
custom03: PLACEHOLDER custom003: PLACEHOLDER
custom04: PLACEHOLDER custom004: PLACEHOLDER
custom05: PLACEHOLDER custom005: PLACEHOLDER
custom06: PLACEHOLDER custom006: PLACEHOLDER
custom07: PLACEHOLDER custom007: PLACEHOLDER
custom08: PLACEHOLDER custom008: PLACEHOLDER
custom09: PLACEHOLDER custom009: PLACEHOLDER
custom10: PLACEHOLDER custom010: PLACEHOLDER
settings: settings:
lsheap: 500m lsheap: 500m
config: config:

20
salt/logstash/soc_logstash.yaml
View File

@@ -32,21 +32,21 @@ logstash:
custom3: *defined_pipelines custom3: *defined_pipelines
custom4: *defined_pipelines custom4: *defined_pipelines
pipeline_config: pipeline_config:
custom01: &pipeline_config custom001: &pipeline_config
description: Pipeline configuration for Logstash description: Pipeline configuration for Logstash
advanced: True advanced: True
multiline: True multiline: True
forcedType: string forcedType: string
helpLink: logstash.html helpLink: logstash.html
custom02: *pipeline_config custom002: *pipeline_config
custom03: *pipeline_config custom003: *pipeline_config
custom04: *pipeline_config custom004: *pipeline_config
custom05: *pipeline_config custom005: *pipeline_config
custom06: *pipeline_config custom006: *pipeline_config
custom07: *pipeline_config custom007: *pipeline_config
custom08: *pipeline_config custom008: *pipeline_config
custom09: *pipeline_config custom009: *pipeline_config
custom10: *pipeline_config custom010: *pipeline_config
settings: settings:
lsheap: lsheap:
description: Heap size to use for logstash description: Heap size to use for logstash