Merge pull request #6517 from Security-Onion-Solutions/ES0day2

Add JVM Options for logstash

salt/elasticsearch/files/log4j2.properties

@@ -18,6 +18,3 @@ appender.rolling.policies.time.interval = 1
 appender.rolling.policies.time.modulate = true
 rootLogger.level = info
 rootLogger.appenderRef.rolling.ref = rolling
-log4j2.formatMsgNoLookups = true
-
-

salt/logstash/etc/jvm.options

@@ -0,0 +1 @@
+-Dlog4j2.formatMsgNoLookups=true

salt/logstash/etc/log4j2.properties

@@ -34,4 +34,3 @@ rootLogger.level = info
 rootLogger.appenderRef.rolling.ref = rolling
 #rootLogger.level = ${sys:ls.log.level}
 #rootLogger.appenderRef.console.ref = ${sys:ls.log.format}_console
-log4j2.formatMsgNoLookups = true

salt/logstash/init.sls

@@ -156,7 +156,7 @@ so-logstash:
     - extra_hosts:
       - {{ EXTRAHOSTHOSTNAME }}:{{ EXTRAHOSTIP }}
     - environment:
-      - LS_JAVA_OPTS=-Xms{{ lsheap }} -Xmx{{ lsheap }} -Dlog4j2.formatMsgNoLookups=true
+      - LS_JAVA_OPTS=-Xms{{ lsheap }} -Xmx{{ lsheap }}
     - port_bindings:
   {% for BINDING in DOCKER_OPTIONS.port_bindings %}
       - {{ BINDING }}

salt/thehive/etc/es/log4j2.properties

@@ -18,5 +18,3 @@ appender.rolling.policies.time.interval = 1
 appender.rolling.policies.time.modulate = true
 rootLogger.level = info
 rootLogger.appenderRef.rolling.ref = rolling
-log4j2.formatMsgNoLookups = true
-