CSEC_PUBLIC/securityonion
1
0
Fork 0
mirror of https://github.com/Security-Onion-Solutions/securityonion.git synced 2026-04-25 05:57:49 +02:00
Code Issues Packages Projects Releases Wiki Activity

Fix log rotate on Suricata

Browse Source
This commit is contained in:
Mike Reeves
2020-06-04 10:43:24 -04:00
parent 7043bbae9d
commit 79adf2012a
3 changed files with 4 additions and 4 deletions
Download Patch File Download Diff File Expand all files Collapse all files
salt/filebeat/etc/filebeat.yml
+1 -1
View File
@@ -123,7 +123,7 @@ filebeat.inputs:
- type: log - type: log
paths: paths:
- /suricata/eve.json - /suricata/eve*.json
fields: fields:
module: suricata module: suricata
dataset: common dataset: common
salt/suricata/files/suricata.yaml
+2 -2
View File
@@ -95,8 +95,8 @@ outputs:
- eve-log: - eve-log:
enabled: yes enabled: yes
filetype: regular #regular|syslog|unix_dgram|unix_stream|redis filetype: regular #regular|syslog|unix_dgram|unix_stream|redis
filename: /nsm/eve.json filename: /nsm/eve-%Y-%m-%d-%H:%M.json
rotate-interval: day rotate-interval: hour
#prefix: "@cee: " # prefix to prepend to each log entry #prefix: "@cee: " # prefix to prepend to each log entry
# the following are valid when type: syslog above # the following are valid when type: syslog above
salt/suricata/files/suricataMETA.yaml
+1 -1
View File
@@ -95,7 +95,7 @@ outputs:
- eve-log: - eve-log:
enabled: yes enabled: yes
filetype: regular #regular|syslog|unix_dgram|unix_stream|redis filetype: regular #regular|syslog|unix_dgram|unix_stream|redis
filename: /nsm/eve.json filename: /nsm/eve-%Y-%m-%d-%H:%M.json
rotate-interval: hour rotate-interval: hour
#prefix: "@cee: " # prefix to prepend to each log entry #prefix: "@cee: " # prefix to prepend to each log entry