CSEC_PUBLIC/securityonion
1
0
Fork 0
mirror of https://github.com/Security-Onion-Solutions/securityonion.git synced 2026-04-27 23:18:08 +02:00
Code Issues Packages Projects Releases Wiki Activity

Logstash Import and Template Assignment

Browse Source
This commit is contained in:
Mike Reeves
2020-07-10 13:53:55 -04:00
parent bbef7955b2
commit 5eb33d5ac7
25 changed files with 70 additions and 350 deletions
Download Patch File Download Diff File Expand all files Collapse all files
salt/filebeat/etc/filebeat.yml
+4
View File
@@ -126,6 +126,8 @@ filebeat.inputs:
category: network
imported: true
processors:
- add_tags:
tags: [import]
- dissect:
tokenizer: "/nsm/import/%{import.id}/zeek/logs/%{import.file}"
field: "log.file.path"
@@ -164,6 +166,8 @@ filebeat.inputs:
category: network
imported: true
processors:
- add_tags:
tags: [import]
- dissect:
tokenizer: "/nsm/import/%{import.id}/suricata/%{import.file}"
field: "log.file.path"