CSEC_PUBLIC/securityonion
1
0
Fork 0
mirror of https://github.com/Security-Onion-Solutions/securityonion.git synced 2025-12-11 03:32:53 +01:00
Code Issues Packages Projects Releases Wiki Activity

Tighten & Document Pipelines

Browse Source
This commit is contained in:
Josh Brower
2023-07-10 14:17:42 -04:00
parent 7805ca8beb
commit 31edf2e8ea
2 changed files with 12 additions and 8 deletions
Download Patch File Download Diff File Expand all files Collapse all files

6
salt/logstash/pipelines/config/so/0013_input_lumberjack_fleet.conf
View File

@@ -1,7 +1,7 @@
input {
elastic_agent {
port => 5056
tags => [ "elastic-agent" ]
tags => [ "elastic-agent", "fleet-lumberjack-input" ]
ssl => true
ssl_certificate => "/usr/share/logstash/elasticfleet-lumberjack.crt"
ssl_key => "/usr/share/logstash/elasticfleet-lumberjack.key"
@@ -10,9 +10,13 @@ input {
codec => "json"
}
}
filter {
if "fleet-lumberjack-input" in [tags] {
mutate {
rename => {"@metadata" => "metadata"}
}
}
}