From ce43fd7cd436344d563dbfdc7152d64a7c4071a7 Mon Sep 17 00:00:00 2001
From: Josh Brower <josh@defensivedepth.com>
Date: Tue, 1 Jan 2019 11:20:09 -0500
Subject: [PATCH] Moved to dynamic

---
 .../custom/parsers/9100_output_osquery.conf   | 19 -------------------
 1 file changed, 19 deletions(-)
 delete mode 100644 salt/logstash/files/custom/parsers/9100_output_osquery.conf

diff --git a/salt/logstash/files/custom/parsers/9100_output_osquery.conf b/salt/logstash/files/custom/parsers/9100_output_osquery.conf
deleted file mode 100644
index 59c16347b..000000000
--- a/salt/logstash/files/custom/parsers/9100_output_osquery.conf
+++ /dev/null
@@ -1,19 +0,0 @@
-{%- if grains['role'] == 'so-eval' -%}
-{%- set ES = salt['pillar.get']('master:mainip', '') -%}
-{%- else %}
-{%- set ES = salt['pillar.get']('node:mainip', '') -%}
-{%- endif %}
-# Author: Josh Brower
-# Last Update: 12/28/2018
-# Output to ES for osquery tagged logs
-
-
-output {
-  if "osquery" in [tags] {
-    elasticsearch {
-      hosts => "{{ ES }}"
-      index => "logstash-osquery-%{+YYYY.MM.dd}"
-      template => "/logstash-template.json"
-    }
-  }
-}