mirror of
https://github.com/Security-Onion-Solutions/securityonion.git
synced 2025-12-06 17:22:49 +01:00
Logstash Module - Fix ES output logic
This commit is contained in:
@@ -2,6 +2,7 @@
|
||||
{%- set ES = salt['pillar.get']('master:mainip', '') -%}
|
||||
{%- else %}
|
||||
{%- set ES = salt['pillar.get']('node:mainip', '') -%}
|
||||
{%- endif %}
|
||||
# Author: Justin Henderson
|
||||
# SANS Instructor and author of SANS SEC555: SIEM and Tactical Analytics
|
||||
# Email: justin@hasecuritysolution.com
|
||||
@@ -27,4 +28,3 @@ output {
|
||||
}
|
||||
}
|
||||
}
|
||||
{%- endif %}
|
||||
|
||||
@@ -2,6 +2,7 @@
|
||||
{%- set ES = salt['pillar.get']('master:mainip', '') -%}
|
||||
{%- else %}
|
||||
{%- set ES = salt['pillar.get']('node:mainip', '') -%}
|
||||
{%- endif %}
|
||||
# Author: Justin Henderson
|
||||
# SANS Instructor and author of SANS SEC555: SIEM and Tactical Analytics
|
||||
# Email: justin@hasecuritysolution.com
|
||||
@@ -24,4 +25,3 @@ output {
|
||||
}
|
||||
}
|
||||
}
|
||||
{%- endif %}
|
||||
|
||||
@@ -2,6 +2,7 @@
|
||||
{%- set ES = salt['pillar.get']('master:mainip', '') -%}
|
||||
{%- else %}
|
||||
{%- set ES = salt['pillar.get']('node:mainip', '') -%}
|
||||
{%- endif %}
|
||||
# Updated by: Doug Burks
|
||||
# Last Update: 5/16/2017
|
||||
|
||||
@@ -24,4 +25,3 @@ output {
|
||||
}
|
||||
}
|
||||
}
|
||||
{%- endif %}
|
||||
|
||||
@@ -2,6 +2,7 @@
|
||||
{%- set ES = salt['pillar.get']('master:mainip', '') -%}
|
||||
{%- else %}
|
||||
{%- set ES = salt['pillar.get']('node:mainip', '') -%}
|
||||
{%- endif %}
|
||||
# Author: Justin Henderson
|
||||
# SANS Instructor and author of SANS SEC555: SIEM and Tactical Analytics
|
||||
# Email: justin@hasecuritysolution.com
|
||||
@@ -24,4 +25,3 @@ output {
|
||||
}
|
||||
}
|
||||
}
|
||||
{%- endif %}
|
||||
|
||||
@@ -2,6 +2,7 @@
|
||||
{%- set ES = salt['pillar.get']('master:mainip', '') -%}
|
||||
{%- else %}
|
||||
{%- set ES = salt['pillar.get']('node:mainip', '') -%}
|
||||
{%- endif %}
|
||||
# Author: Justin Henderson
|
||||
# SANS Instructor and author of SANS SEC555: SIEM and Tactical Analytics
|
||||
# Email: justin@hasecuritysolution.com
|
||||
@@ -23,4 +24,3 @@ output {
|
||||
}
|
||||
}
|
||||
}
|
||||
{%- endif %}
|
||||
|
||||
@@ -2,6 +2,7 @@
|
||||
{%- set ES = salt['pillar.get']('master:mainip', '') -%}
|
||||
{%- else %}
|
||||
{%- set ES = salt['pillar.get']('node:mainip', '') -%}
|
||||
{%- endif %}
|
||||
# Author: Justin Henderson
|
||||
# SANS Instructor and author of SANS SEC555: SIEM and Tactical Analytics
|
||||
# Email: justin@hasecuritysolution.com
|
||||
@@ -22,4 +23,3 @@ output {
|
||||
}
|
||||
}
|
||||
}
|
||||
{%- endif %}
|
||||
|
||||
@@ -2,6 +2,7 @@
|
||||
{%- set ES = salt['pillar.get']('master:mainip', '') -%}
|
||||
{%- else %}
|
||||
{%- set ES = salt['pillar.get']('node:mainip', '') -%}
|
||||
{%- endif %}
|
||||
# Author: Justin Henderson
|
||||
# SANS Instructor and author of SANS SEC555: SIEM and Tactical Analytics
|
||||
# Email: justin@hasecuritysolution.com
|
||||
@@ -22,4 +23,3 @@ output {
|
||||
}
|
||||
}
|
||||
}
|
||||
{%- endif %}
|
||||
|
||||
@@ -2,6 +2,7 @@
|
||||
{%- set ES = salt['pillar.get']('master:mainip', '') -%}
|
||||
{%- else %}
|
||||
{%- set ES = salt['pillar.get']('node:mainip', '') -%}
|
||||
{%- endif %}
|
||||
# Author: Justin Henderson
|
||||
# SANS Instructor and author of SANS SEC555: SIEM and Tactical Analytics
|
||||
# Email: justin@hasecuritysolution.com
|
||||
@@ -23,4 +24,3 @@ output {
|
||||
}
|
||||
}
|
||||
}
|
||||
{%- endif %}
|
||||
|
||||
@@ -2,6 +2,7 @@
|
||||
{%- set ES = salt['pillar.get']('master:mainip', '') -%}
|
||||
{%- else %}
|
||||
{%- set ES = salt['pillar.get']('node:mainip', '') -%}
|
||||
{%- endif %}
|
||||
# Author: Justin Henderson
|
||||
# SANS Instructor and author of SANS SEC555: SIEM and Tactical Analytics
|
||||
# Email: justin@hasecuritysolution.com
|
||||
@@ -23,4 +24,3 @@ output {
|
||||
}
|
||||
}
|
||||
}
|
||||
{%- endif %}
|
||||
|
||||
@@ -2,6 +2,7 @@
|
||||
{%- set ES = salt['pillar.get']('master:mainip', '') -%}
|
||||
{%- else %}
|
||||
{%- set ES = salt['pillar.get']('node:mainip', '') -%}
|
||||
{%- endif %}
|
||||
# Author: Justin Henderson
|
||||
# SANS Instructor and author of SANS SEC555: SIEM and Tactical Analytics
|
||||
# Email: justin@hasecuritysolution.com
|
||||
@@ -26,4 +27,3 @@ output {
|
||||
}
|
||||
}
|
||||
}
|
||||
{%- endif %}
|
||||
|
||||
@@ -2,6 +2,7 @@
|
||||
{%- set ES = salt['pillar.get']('master:mainip', '') -%}
|
||||
{%- else %}
|
||||
{%- set ES = salt['pillar.get']('node:mainip', '') -%}
|
||||
{%- endif %}
|
||||
# Author: Justin Henderson
|
||||
# SANS Instructor and author of SANS SEC555: SIEM and Tactical Analytics
|
||||
# Updated by: Doug Burks
|
||||
@@ -25,4 +26,3 @@ output {
|
||||
}
|
||||
}
|
||||
}
|
||||
{%- endif %}
|
||||
|
||||
@@ -2,6 +2,7 @@
|
||||
{%- set ES = salt['pillar.get']('master:mainip', '') -%}
|
||||
{%- else %}
|
||||
{%- set ES = salt['pillar.get']('node:mainip', '') -%}
|
||||
{%- endif %}
|
||||
# Author: Justin Henderson
|
||||
# SANS Instructor and author of SANS SEC555: SIEM and Tactical Analytics
|
||||
# Email: justin@hasecuritysolution.com
|
||||
@@ -26,4 +27,3 @@ output {
|
||||
}
|
||||
}
|
||||
}
|
||||
{%- endif %}
|
||||
|
||||
@@ -2,6 +2,7 @@
|
||||
{%- set ES = salt['pillar.get']('master:mainip', '') -%}
|
||||
{%- else %}
|
||||
{%- set ES = salt['pillar.get']('node:mainip', '') -%}
|
||||
{%- endif %}
|
||||
# Author: Justin Henderson
|
||||
# SANS Instructor and author of SANS SEC555: SIEM and Tactical Analytics
|
||||
# Email: justin@hasecuritysolution.com
|
||||
@@ -24,4 +25,3 @@ output {
|
||||
}
|
||||
}
|
||||
}
|
||||
{%- endif %}
|
||||
|
||||
@@ -2,6 +2,7 @@
|
||||
{%- set ES = salt['pillar.get']('master:mainip', '') -%}
|
||||
{%- else %}
|
||||
{%- set ES = salt['pillar.get']('node:mainip', '') -%}
|
||||
{%- endif %}
|
||||
# Author: Justin Henderson
|
||||
# SANS Instructor and author of SANS SEC555: SIEM and Tactical Analytics
|
||||
# Email: justin@hasecuritysolution.com
|
||||
@@ -24,4 +25,3 @@ output {
|
||||
}
|
||||
}
|
||||
}
|
||||
{%- endif %}
|
||||
|
||||
@@ -2,6 +2,7 @@
|
||||
{%- set ES = salt['pillar.get']('master:mainip', '') -%}
|
||||
{%- else %}
|
||||
{%- set ES = salt['pillar.get']('node:mainip', '') -%}
|
||||
{%- endif %}
|
||||
# Author: Justin Henderson
|
||||
# SANS Instructor and author of SANS SEC555: SIEM and Tactical Analytics
|
||||
# Email: justin@hasecuritysolution.com
|
||||
@@ -24,4 +25,3 @@ output {
|
||||
}
|
||||
}
|
||||
}
|
||||
{%- endif %}
|
||||
|
||||
@@ -2,6 +2,7 @@
|
||||
{%- set ES = salt['pillar.get']('master:mainip', '') -%}
|
||||
{%- else %}
|
||||
{%- set ES = salt['pillar.get']('node:mainip', '') -%}
|
||||
{%- endif %}
|
||||
# Author: Wes Lambert
|
||||
# Last Update: 09/14/2018
|
||||
filter {
|
||||
@@ -22,4 +23,3 @@ output {
|
||||
}
|
||||
}
|
||||
}
|
||||
{%- endif %}
|
||||
|
||||
@@ -2,6 +2,7 @@
|
||||
{%- set ES = salt['pillar.get']('master:mainip', '') -%}
|
||||
{%- else %}
|
||||
{%- set ES = salt['pillar.get']('node:mainip', '') -%}
|
||||
{%- endif %}
|
||||
# Author: Justin Henderson
|
||||
# SANS Instructor and author of SANS SEC555: SIEM and Tactical Analytics
|
||||
# Updated by: Doug Burks
|
||||
@@ -26,4 +27,3 @@ output {
|
||||
}
|
||||
}
|
||||
}
|
||||
{%- endif %}
|
||||
|
||||
@@ -2,6 +2,7 @@
|
||||
{%- set ES = salt['pillar.get']('master:mainip', '') -%}
|
||||
{%- else %}
|
||||
{%- set ES = salt['pillar.get']('node:mainip', '') -%}
|
||||
{%- endif %}
|
||||
# Author: Justin Henderson
|
||||
# SANS Instructor and author of SANS SEC555: SIEM and Tactical Analytics
|
||||
# Email: justin@hasecuritysolution.com
|
||||
@@ -23,4 +24,3 @@ output {
|
||||
}
|
||||
}
|
||||
}
|
||||
{%- endif %}
|
||||
|
||||
Reference in New Issue
Block a user