From 2db2054cce0ee92eab014f4fa16004a356a46c3c Mon Sep 17 00:00:00 2001 From: m0duspwnens Date: Fri, 29 May 2020 10:58:53 -0400 Subject: [PATCH] update instructions in logstash customer pipelines and templates - https://github.com/Security-Onion-Solutions/securityonion-saltstack/issues/749 --- .../pipelines/config/custom/place_custom_config_in_local | 1 + .../templates/custom/Drop.Your.Custom.Templates.Here.conf | 2 -- .../pipelines/templates/custom/place_custom_template_in_local | 2 ++ 3 files changed, 3 insertions(+), 2 deletions(-) create mode 100644 salt/logstash/pipelines/config/custom/place_custom_config_in_local delete mode 100644 salt/logstash/pipelines/templates/custom/Drop.Your.Custom.Templates.Here.conf create mode 100644 salt/logstash/pipelines/templates/custom/place_custom_template_in_local diff --git a/salt/logstash/pipelines/config/custom/place_custom_config_in_local b/salt/logstash/pipelines/config/custom/place_custom_config_in_local new file mode 100644 index 000000000..55c386a67 --- /dev/null +++ b/salt/logstash/pipelines/config/custom/place_custom_config_in_local @@ -0,0 +1 @@ +# For custom logstash configs, they should be placed in /opt/so/saltstack/local/salt/logstash/pipelines/config/custom/ diff --git a/salt/logstash/pipelines/templates/custom/Drop.Your.Custom.Templates.Here.conf b/salt/logstash/pipelines/templates/custom/Drop.Your.Custom.Templates.Here.conf deleted file mode 100644 index 9ee9e27b5..000000000 --- a/salt/logstash/pipelines/templates/custom/Drop.Your.Custom.Templates.Here.conf +++ /dev/null @@ -1,2 +0,0 @@ -# Reference /usr/share/logstash/pipeline.custom/templates/YOURTEMPLATE.json -# diff --git a/salt/logstash/pipelines/templates/custom/place_custom_template_in_local b/salt/logstash/pipelines/templates/custom/place_custom_template_in_local new file mode 100644 index 000000000..af38c6107 --- /dev/null +++ b/salt/logstash/pipelines/templates/custom/place_custom_template_in_local @@ -0,0 +1,2 @@ +# Reference /usr/share/logstash/pipeline.custom/templates/YOURTEMPLATE.json +# For custom logstash templates, they should be placed in /opt/so/saltstack/local/salt/logstash/pipelines/templates/custom/