CSEC_PUBLIC/securityonion
1
0
Fork 0
mirror of https://github.com/Security-Onion-Solutions/securityonion.git synced 2025-12-06 17:22:49 +01:00
Code Issues Packages Projects Releases Wiki Activity

Add client_id to logstash pipeline. To identify which searchnode is pulling messages

Browse Source 
Signed-off-by: reyesj2 <94730068+reyesj2@users.noreply.github.com>
This commit is contained in:
reyesj2
2024-04-05 15:38:00 -04:00
parent 721e04f793
commit 65274e89d7
1 changed files with 1 additions and 0 deletions
Download Patch File Download Diff File Expand all files Collapse all files

1
salt/logstash/pipelines/config/so/0800_input_kafka.conf.jinja
View File

@@ -19,6 +19,7 @@ input {
#Can ingest multiple topics. Set to a value from SOC UI? #Can ingest multiple topics. Set to a value from SOC UI?
topics => ['ea-logs'] topics => ['ea-logs']
group_id => 'searchnodes' group_id => 'searchnodes'
client_id => '{{ GLOBALS.hostname }}'
security_protocol => 'SSL' security_protocol => 'SSL'
bootstrap_servers => '{{ bootstrap_servers }}' bootstrap_servers => '{{ bootstrap_servers }}'
ssl_keystore_location => '/usr/share/logstash/kafka-logstash.p12' ssl_keystore_location => '/usr/share/logstash/kafka-logstash.p12'