Merge pull request #15151 from Security-Onion-Solutions/reyesj2-patch-9

update log4j2 policy for ES json output
This commit is contained in:
Jorge Reyes
2025-10-16 16:25:47 -05:00
committed by GitHub

View File

@@ -35,7 +35,12 @@ appender.rolling_json.policies.time.type = TimeBasedTriggeringPolicy
appender.rolling_json.policies.time.interval = 1 appender.rolling_json.policies.time.interval = 1
appender.rolling_json.policies.time.modulate = true appender.rolling_json.policies.time.modulate = true
appender.rolling_json.strategy.type = DefaultRolloverStrategy appender.rolling_json.strategy.type = DefaultRolloverStrategy
appender.rolling_json.strategy.max = 1 appender.rolling_json.strategy.action.type = Delete
appender.rolling_json.strategy.action.basepath = /var/log/elasticsearch
appender.rolling_json.strategy.action.condition.type = IfFileName
appender.rolling_json.strategy.action.condition.glob = *.json.gz
appender.rolling_json.strategy.action.condition.nested_condition.type = IfLastModified
appender.rolling_json.strategy.action.condition.nested_condition.exceeds = 1D
rootLogger.level = info rootLogger.level = info
rootLogger.appenderRef.rolling.ref = rolling rootLogger.appenderRef.rolling.ref = rolling