CSEC_PUBLIC/securityonion
1
0
Fork 0
mirror of https://github.com/Security-Onion-Solutions/securityonion.git synced 2025-12-18 15:02:50 +01:00
Code Issues Packages Projects Releases Wiki Activity

Logstash Module - Pull from unparsed

Browse Source
This commit is contained in:
Mike Reeves
2018-09-21 08:30:40 -04:00
parent 76adc0decc
commit 27579a6150
2 changed files with 4 additions and 3 deletions
Download Patch File Download Diff File Expand all files Collapse all files

5
salt/filebeat/init.sls
View File

@@ -29,12 +29,13 @@ filebeatpkidir:
- group: 939 - group: 939
- makedirs: True - makedirs: True
# This needs to be owned by root
filebeatconfsync: filebeatconfsync:
file.recurse: file.recurse:
- name: /opt/so/conf/filebeat/etc - name: /opt/so/conf/filebeat/etc
- source: salt://filebeat/etc - source: salt://filebeat/etc
- user: 939 - user: 0
- group: 939 - group: 0
- template: jinja - template: jinja
#filebeatcrt: #filebeatcrt:

2
salt/logstash/files/dynamic/0900_input_redis.conf
View File

@@ -3,7 +3,7 @@ input {
redis { redis {
host => '{{ master }}' host => '{{ master }}'
data_type => 'list' data_type => 'list'
key => 'logstash:redis' key => 'logstash:unparsed'
type => 'redis-input' type => 'redis-input'
# threads => 1 # threads => 1
} }