CSEC_PUBLIC/securityonion
1
0
Fork 0
mirror of https://github.com/Security-Onion-Solutions/securityonion.git synced 2025-12-06 09:12:45 +01:00
Code Issues Packages Projects Releases Wiki Activity

Logstash Module - Add redis input

Browse Source
This commit is contained in:
Mike Reeves
2018-05-18 13:36:42 -04:00
parent f27b1de048
commit 5508d24dc6
2 changed files with 10 additions and 24 deletions
Download Patch File Download Diff File Expand all files Collapse all files

25
salt/logstash/conf/conf.enabled.txt.parser
View File

@@ -7,13 +7,6 @@
# /usr/share/logstash/pipeline.custom/1234_input_custom.conf # /usr/share/logstash/pipeline.custom/1234_input_custom.conf
## ##
# All of the defaults are loaded. # All of the defaults are loaded.
/usr/share/logstash/pipeline.so/0000_input_syslogng.conf
/usr/share/logstash/pipeline.so/0001_input_json.conf
/usr/share/logstash/pipeline.so/0002_input_windows_json.conf
/usr/share/logstash/pipeline.so/0003_input_syslog.conf
/usr/share/logstash/pipeline.so/0005_input_suricata.conf
/usr/share/logstash/pipeline.so/0006_input_beats.conf
/usr/share/logstash/pipeline.so/0007_input_import.conf
/usr/share/logstash/pipeline.so/1000_preprocess_log_elapsed.conf /usr/share/logstash/pipeline.so/1000_preprocess_log_elapsed.conf
/usr/share/logstash/pipeline.so/1001_preprocess_syslogng.conf /usr/share/logstash/pipeline.so/1001_preprocess_syslogng.conf
/usr/share/logstash/pipeline.so/1002_preprocess_json.conf /usr/share/logstash/pipeline.so/1002_preprocess_json.conf
@@ -87,20 +80,4 @@
/usr/share/logstash/pipeline.so/8505_postprocess_freq_analysis_bro_x509.conf /usr/share/logstash/pipeline.so/8505_postprocess_freq_analysis_bro_x509.conf
/usr/share/logstash/pipeline.so/8998_postprocess_log_elapsed.conf /usr/share/logstash/pipeline.so/8998_postprocess_log_elapsed.conf
/usr/share/logstash/pipeline.so/8999_postprocess_rename_type.conf /usr/share/logstash/pipeline.so/8999_postprocess_rename_type.conf
/usr/share/logstash/pipeline.so/9000_output_bro.conf /usr/share/logstash/pipeline.dynamic/9999_output_redis.conf
/usr/share/logstash/pipeline.so/9001_output_switch.conf
/usr/share/logstash/pipeline.so/9002_output_import.conf
/usr/share/logstash/pipeline.so/9004_output_flow.conf
/usr/share/logstash/pipeline.so/9026_output_dhcp.conf
/usr/share/logstash/pipeline.so/9029_output_esxi.conf
/usr/share/logstash/pipeline.so/9030_output_greensql.conf
/usr/share/logstash/pipeline.so/9031_output_iis.conf
/usr/share/logstash/pipeline.so/9032_output_mcafee.conf
/usr/share/logstash/pipeline.so/9033_output_snort.conf
/usr/share/logstash/pipeline.so/9034_output_syslog.conf
/usr/share/logstash/pipeline.so/9200_output_firewall.conf
/usr/share/logstash/pipeline.so/9300_output_windows.conf
/usr/share/logstash/pipeline.so/9301_output_dns_windows.conf
/usr/share/logstash/pipeline.so/9400_output_suricata.conf
/usr/share/logstash/pipeline.so/9500_output_beats.conf
/usr/share/logstash/pipeline.so/9998_output_test_data.conf

9
salt/logstash/files/dynamic/0900_input_redis.conf Normal file
View File

@@ -0,0 +1,9 @@
input {
redis {
host => '172.18.0.1'
data_type => 'list'
key => 'logstash:redis'
type => 'redis-input'
# threads => 1
}
}