mirror of
https://github.com/Security-Onion-Solutions/securityonion.git
synced 2026-04-29 07:57:52 +02:00
Logstash Module - Add Jinja for output plugins
This commit is contained in:
@@ -1,3 +1,4 @@
|
||||
{%- set ES = salt['pillar.get']('mainip'. '') %}
|
||||
# Author: Justin Henderson
|
||||
# SANS Instructor and author of SANS SEC555: SIEM and Tactical Analytics
|
||||
# Email: justin@hasecuritysolution.com
|
||||
@@ -14,7 +15,7 @@ output {
|
||||
if [event_type] == "suricata" and "test_data" not in [tags] {
|
||||
#stdout { codec => rubydebug }
|
||||
elasticsearch {
|
||||
hosts => elasticsearch
|
||||
hosts => {{ ES }}
|
||||
index => "logstash-ids-%{+YYYY.MM.dd}"
|
||||
template => "/logstash-template.json"
|
||||
}
|
||||
|
||||
Reference in New Issue
Block a user