mirror of
https://github.com/Security-Onion-Solutions/securityonion.git
synced 2025-12-06 17:22:49 +01:00
Logstash Module - update configs
This commit is contained in:
File diff suppressed because it is too large
Load Diff
@@ -1 +1,2 @@
|
||||
#
|
||||
#
|
||||
@@ -12,7 +12,7 @@ name = LogstashPropertiesConfig
|
||||
#appender.json_console.layout.compact = true
|
||||
#appender.json_console.layout.eventEol = true
|
||||
|
||||
#This is is a test -- if this here, then the volume is mounted correctly.
|
||||
#Define logging settings.
|
||||
appender.rolling.type = RollingFile
|
||||
appender.rolling.name = rolling
|
||||
appender.rolling.fileName = /var/log/logstash/logstash.log
|
||||
@@ -23,7 +23,14 @@ appender.rolling.policies.type = Policies
|
||||
appender.rolling.policies.time.type = TimeBasedTriggeringPolicy
|
||||
appender.rolling.policies.time.interval = 1
|
||||
appender.rolling.policies.time.modulate = true
|
||||
#rootLogger.level = info
|
||||
appender.rolling.strategy.type = DefaultRolloverStrategy
|
||||
appender.rolling.strategy.action.type = Delete
|
||||
appender.rolling.strategy.action.basepath = /var/log/logstash
|
||||
appender.rolling.strategy.action.condition.type = IfFileName
|
||||
appender.rolling.strategy.action.condition.glob = logstash-*.log
|
||||
appender.rolling.strategy.action.condition.nested_condition.type = IfLastModified
|
||||
appender.rolling.strategy.action.condition.nested_condition.age = 7D
|
||||
rootLogger.level = info
|
||||
rootLogger.appenderRef.rolling.ref = rolling
|
||||
rootLogger.level = ${sys:ls.log.level}
|
||||
#rootLogger.level = ${sys:ls.log.level}
|
||||
#rootLogger.appenderRef.console.ref = ${sys:ls.log.format}_console
|
||||
|
||||
File diff suppressed because it is too large
Load Diff
@@ -63,7 +63,7 @@
|
||||
#
|
||||
# path.config:
|
||||
# /etc/logstash/conf.d is mapped to /usr/share/logstash/pipeline in the Docker image
|
||||
path.config: /usr/share/logstash/pipeline/*.conf
|
||||
path.config: /usr/share/logstash/pipeline.enabled/*.conf
|
||||
|
||||
# Special Docker path
|
||||
# path.config: /usr/share/logstash/pipeline
|
||||
|
||||
Reference in New Issue
Block a user