CSEC_PUBLIC/securityonion
1
0
Fork 0
mirror of https://github.com/Security-Onion-Solutions/securityonion.git synced 2025-12-07 17:52:46 +01:00
Code Issues Packages Projects Releases Wiki Activity

Logstash Module - SSL updates

Browse Source
This commit is contained in:
Mike Reeves
2018-06-07 16:55:12 -04:00
parent 54caf609ed
commit 6f05f788f1
3 changed files with 5 additions and 3 deletions
Download Patch File Download Diff File Expand all files Collapse all files

2
salt/logstash/conf/conf.enabled.txt.so-master
View File

@@ -12,6 +12,6 @@
/usr/share/logstash/pipeline.so/0002_input_windows_json.conf /usr/share/logstash/pipeline.so/0002_input_windows_json.conf
/usr/share/logstash/pipeline.so/0003_input_syslog.conf /usr/share/logstash/pipeline.so/0003_input_syslog.conf
/usr/share/logstash/pipeline.so/0005_input_suricata.conf /usr/share/logstash/pipeline.so/0005_input_suricata.conf
/usr/share/logstash/pipeline.so/0006_input_beats.conf /usr/share/logstash/pipeline.dynamic/0006_input_beats.conf
/usr/share/logstash/pipeline.so/0007_input_import.conf /usr/share/logstash/pipeline.so/0007_input_import.conf
/usr/share/logstash/pipeline.dynamic/9999_output_redis.conf /usr/share/logstash/pipeline.dynamic/9999_output_redis.conf

5
salt/logstash/files/dynamic/0006_input_beats.conf
View File

@@ -7,8 +7,9 @@ input {
beats { beats {
port => "5044" port => "5044"
ssl => true ssl => true
ssl_certificate => "" ssl_certificate_authorities => ["/usr/share/filebeat/ca.crt"]
ssl_key => "/some/location" ssl_certificate => "/usr/share/logstash/filebeat.crt"
ssl_key => "/usr/share/logstash/filebeat.key"
tags => [ "beat" ] tags => [ "beat" ]
} }
} }

1
salt/logstash/init.sls
View File

@@ -135,4 +135,5 @@ so-logstash:
- /sys/fs/cgroup:/sys/fs/cgroup:ro - /sys/fs/cgroup:/sys/fs/cgroup:ro
- /etc/pki/filebeat.crt:/usr/share/logstash/filebeat.crt:ro - /etc/pki/filebeat.crt:/usr/share/logstash/filebeat.crt:ro
- /etc/pki/filebeat.key:/usr/share/logstash/filebeat.key:ro - /etc/pki/filebeat.key:/usr/share/logstash/filebeat.key:ro
- /etc/pki/ca.crt:/usr/share/filebeat/ca.crt:ro
- network_mode: so-elastic-net - network_mode: so-elastic-net