CSEC_PUBLIC/securityonion
1
0
Fork 0
mirror of https://github.com/Security-Onion-Solutions/securityonion.git synced 2026-04-29 07:57:52 +02:00
Code Issues Packages Projects Releases Wiki Activity

Logstash Module - Add Jinja for output plugins

Browse Source
This commit is contained in:
Mike Reeves
2018-09-14 14:32:27 -04:00
parent cb988eefde
commit a413b7594d
19 changed files with 39 additions and 21 deletions
Download Patch File Download Diff File Expand all files Collapse all files
salt/logstash/files/dynamic/9200_output_firewall.conf
+2 -1
View File
@@ -1,3 +1,4 @@
{%- set ES = salt['pillar.get']('mainip'. '') %}
# Author: Justin Henderson
# SANS Instructor and author of SANS SEC555: SIEM and Tactical Analytics
# Email: justin@hasecuritysolution.com
@@ -14,7 +15,7 @@ output {
if "firewall" in [tags] and "test_data" not in [tags] {
# stdout { codec => rubydebug }
elasticsearch {
hosts => elasticsearch
hosts => {{ ES }}
index => "logstash-firewall-%{+YYYY.MM.dd}"
template_name => "logstash"
template => "/logstash-template.json"