CSEC_PUBLIC/securityonion
1
0
Fork 0
mirror of https://github.com/Security-Onion-Solutions/securityonion.git synced 2025-12-06 17:22:49 +01:00
Code Issues Packages Projects Releases Wiki Activity

Logstash Module - update configs

Browse Source
This commit is contained in:
Mike Reeves
2018-04-18 14:52:23 -04:00
parent 113b69a75f
commit db5942993e
5 changed files with 4590 additions and 76 deletions
Download Patch File Download Diff File Expand all files Collapse all files

1152
salt/logstash/files/beats-template.json
View File

File diff suppressed because it is too large Load Diff

1
salt/logstash/files/pipeline/Drop.Your.Custom.Parsers.Here.conf → salt/logstash/files/custom/Drop.Your.Custom.Parsers.Here.conf
View File

@@ -1 +1,2 @@
# #
#

13
salt/logstash/files/log4j2.properties
View File

@@ -12,7 +12,7 @@ name = LogstashPropertiesConfig
#appender.json_console.layout.compact = true #appender.json_console.layout.compact = true
#appender.json_console.layout.eventEol = true #appender.json_console.layout.eventEol = true
#This is is a test -- if this here, then the volume is mounted correctly. #Define logging settings.
appender.rolling.type = RollingFile appender.rolling.type = RollingFile
appender.rolling.name = rolling appender.rolling.name = rolling
appender.rolling.fileName = /var/log/logstash/logstash.log appender.rolling.fileName = /var/log/logstash/logstash.log
@@ -23,7 +23,14 @@ appender.rolling.policies.type = Policies
appender.rolling.policies.time.type = TimeBasedTriggeringPolicy appender.rolling.policies.time.type = TimeBasedTriggeringPolicy
appender.rolling.policies.time.interval = 1 appender.rolling.policies.time.interval = 1
appender.rolling.policies.time.modulate = true appender.rolling.policies.time.modulate = true
#rootLogger.level = info appender.rolling.strategy.type = DefaultRolloverStrategy
appender.rolling.strategy.action.type = Delete
appender.rolling.strategy.action.basepath = /var/log/logstash
appender.rolling.strategy.action.condition.type = IfFileName
appender.rolling.strategy.action.condition.glob = logstash-*.log
appender.rolling.strategy.action.condition.nested_condition.type = IfLastModified
appender.rolling.strategy.action.condition.nested_condition.age = 7D
rootLogger.level = info
rootLogger.appenderRef.rolling.ref = rolling rootLogger.appenderRef.rolling.ref = rolling
rootLogger.level = ${sys:ls.log.level} #rootLogger.level = ${sys:ls.log.level}
#rootLogger.appenderRef.console.ref = ${sys:ls.log.format}_console #rootLogger.appenderRef.console.ref = ${sys:ls.log.format}_console

3498
salt/logstash/files/logstash-template.json
View File

File diff suppressed because it is too large Load Diff

2
salt/logstash/files/logstash.yml
View File

@@ -63,7 +63,7 @@
# #
# path.config: # path.config:
# /etc/logstash/conf.d is mapped to /usr/share/logstash/pipeline in the Docker image # /etc/logstash/conf.d is mapped to /usr/share/logstash/pipeline in the Docker image
path.config: /usr/share/logstash/pipeline/*.conf path.config: /usr/share/logstash/pipeline.enabled/*.conf
# Special Docker path # Special Docker path
# path.config: /usr/share/logstash/pipeline # path.config: /usr/share/logstash/pipeline