Merge pull request #407 from Security-Onion-Solutions/fix/bro_template

Fix/bro template
This commit is contained in:
weslambert
2020-03-09 09:19:37 -04:00
committed by GitHub
2 changed files with 3 additions and 2 deletions

View File

@@ -25,3 +25,4 @@ logstash:
- so/logstash-ossec-template.json
- so/logstash-strelka-template.json
- so/logstash-template.json
- so/logstash-bro-template.json

View File

@@ -23,8 +23,8 @@ output {
pipeline => "%{event_type}"
hosts => "{{ ES }}"
index => "logstash-bro-%{+YYYY.MM.dd}"
template_name => "logstash"
template => "/logstash-template.json"
template_name => "logstash-bro"
template => "/logstash-bro-template.json"
template_overwrite => true
}
}