mirror of
https://github.com/Security-Onion-Solutions/securityonion.git
synced 2025-12-06 17:22:49 +01:00
update udp integration policy
This commit is contained in:
@@ -11,7 +11,7 @@
|
|||||||
"udp-udp": {
|
"udp-udp": {
|
||||||
"enabled": true,
|
"enabled": true,
|
||||||
"streams": {
|
"streams": {
|
||||||
"udp.generic": {
|
"udp.udp": {
|
||||||
"enabled": true,
|
"enabled": true,
|
||||||
"vars": {
|
"vars": {
|
||||||
"listen_address": "0.0.0.0",
|
"listen_address": "0.0.0.0",
|
||||||
@@ -20,11 +20,13 @@
|
|||||||
"pipeline": "syslog",
|
"pipeline": "syslog",
|
||||||
"max_message_size": "10KiB",
|
"max_message_size": "10KiB",
|
||||||
"keep_null": false,
|
"keep_null": false,
|
||||||
"processors": "- add_fields:\n target: event\n fields: \n module: syslog\n",
|
"processors": "- add_fields:\n target: event\n fields: \n module: syslog",
|
||||||
"tags": [
|
"tags": [
|
||||||
"syslog"
|
"syslog"
|
||||||
],
|
],
|
||||||
"syslog_options": "field: message\n#format: auto\n#timezone: Local"
|
"syslog_options": "field: message\n#format: auto\n#timezone: Local\n",
|
||||||
|
"preserve_original_event": false,
|
||||||
|
"custom": ""
|
||||||
}
|
}
|
||||||
}
|
}
|
||||||
}
|
}
|
||||||
|
|||||||
Reference in New Issue
Block a user