mirror of
https://github.com/Security-Onion-Solutions/securityonion.git
synced 2025-12-16 22:12:48 +01:00
Logstash Module - Pull from unparsed
This commit is contained in:
@@ -29,12 +29,13 @@ filebeatpkidir:
|
||||
- group: 939
|
||||
- makedirs: True
|
||||
|
||||
# This needs to be owned by root
|
||||
filebeatconfsync:
|
||||
file.recurse:
|
||||
- name: /opt/so/conf/filebeat/etc
|
||||
- source: salt://filebeat/etc
|
||||
- user: 939
|
||||
- group: 939
|
||||
- user: 0
|
||||
- group: 0
|
||||
- template: jinja
|
||||
|
||||
#filebeatcrt:
|
||||
|
||||
@@ -3,7 +3,7 @@ input {
|
||||
redis {
|
||||
host => '{{ master }}'
|
||||
data_type => 'list'
|
||||
key => 'logstash:redis'
|
||||
key => 'logstash:unparsed'
|
||||
type => 'redis-input'
|
||||
# threads => 1
|
||||
}
|
||||
|
||||
Reference in New Issue
Block a user