From 633c100ace35906f3245e67c28c239cf86e84bc5 Mon Sep 17 00:00:00 2001 From: Mike Reeves Date: Wed, 5 Aug 2020 16:40:21 -0400 Subject: [PATCH] final logstash tweaks --- salt/logstash/init.sls | 2 +- salt/logstash/pipelines/config/so/0899_input_minio.conf.jinja | 2 +- 2 files changed, 2 insertions(+), 2 deletions(-) diff --git a/salt/logstash/init.sls b/salt/logstash/init.sls index 356a3aceb..1fa5b0e86 100644 --- a/salt/logstash/init.sls +++ b/salt/logstash/init.sls @@ -167,7 +167,7 @@ so-logstash: - /etc/pki/filebeat.crt:/usr/share/logstash/filebeat.crt:ro - /etc/pki/filebeat.p8:/usr/share/logstash/filebeat.key:ro - /etc/pki/ca.crt:/usr/share/filebeat/ca.crt:ro - - /etc/pki/ca.crt:/etc/ssl/certs/ca.crt:ro + - /etc/ssl/certs/intca.crt:/etc/ssl/certs/ca.crt:ro {%- if grains['role'] == 'so-eval' %} - /nsm/zeek:/nsm/zeek:ro - /nsm/suricata:/suricata:ro diff --git a/salt/logstash/pipelines/config/so/0899_input_minio.conf.jinja b/salt/logstash/pipelines/config/so/0899_input_minio.conf.jinja index 27b287532..36a81b537 100644 --- a/salt/logstash/pipelines/config/so/0899_input_minio.conf.jinja +++ b/salt/logstash/pipelines/config/so/0899_input_minio.conf.jinja @@ -13,7 +13,7 @@ input { endpoint => "https://{{ MANAGER }}:9595" bucket => "logstash" delete => true - interval => 10 + interval => 5 codec => json additional_settings => { "force_path_style" => true