CSEC_PUBLIC/securityonion
1
0
Fork 0
mirror of https://github.com/Security-Onion-Solutions/securityonion.git synced 2025-12-30 12:53:19 +01:00
Code Issues Packages Projects Releases Wiki Activity

Moved to dynamic

Browse Source
This commit is contained in:
Josh Brower
2019-01-01 11:20:09 -05:00
committed by GitHub
parent b9f6269925
commit ce43fd7cd4
1 changed files with 0 additions and 19 deletions
Download Patch File Download Diff File Expand all files Collapse all files

19
salt/logstash/files/custom/parsers/9100_output_osquery.conf
View File

@@ -1,19 +0,0 @@
{%- if grains['role'] == 'so-eval' -%}
{%- set ES = salt['pillar.get']('master:mainip', '') -%}
{%- else %}
{%- set ES = salt['pillar.get']('node:mainip', '') -%}
{%- endif %}
# Author: Josh Brower
# Last Update: 12/28/2018
# Output to ES for osquery tagged logs
output {
if "osquery" in [tags] {
elasticsearch {
hosts => "{{ ES }}"
index => "logstash-osquery-%{+YYYY.MM.dd}"
template => "/logstash-template.json"
}
}
}