Logstash Module - Fix jinja syntax

This commit is contained in:
Mike Reeves
2018-09-19 15:12:32 -04:00
parent 2376d8e68f
commit 683662bdee
17 changed files with 51 additions and 51 deletions
@@ -1,5 +1,5 @@
{%- if grains['role'] != 'so-master' %}
{%- set ES = salt['pillar.get']('node:mainip', '') %}
{%- if grains['role'] != 'so-master' -%}
{%- set ES = salt['pillar.get']('node:mainip', '') -%}
# Author: Justin Henderson
# SANS Instructor and author of SANS SEC555: SIEM and Tactical Analytics
# Email: justin@hasecuritysolution.com
@@ -16,7 +16,7 @@ output {
if [event_type] == "iis" and "test_data" not in [tags] {
#stdout { codec => rubydebug }
elasticsearch {
hosts => {{ ES }}
hosts => "{{ ES }}"
template => "/logstash-template.json"
}
}