# Original Author: Justin Henderson # SANS Instructor and author of SANS SEC555: SIEM and Tactical Analytics # Updated by: Doug Burks # Last Update: 5/15/2017 #input { # udp { # port => 1514 # tags => "syslog" # } #} #filter { # if "syslog" in [tags] { # mutate { # #add_tag => [ "conf_file_0003"] # } # } #}