Files
securityonion/salt/logstash/files/conf.d/9500_output_beats.conf
2018-02-05 12:36:27 -05:00

19 lines
335 B
Plaintext

# Author: Wes Lambert
# Last Update: 12/11/2017
filter {
if "beat" in [tags] {
mutate {
##add_tag => [ "conf_file_9000"]
}
}
}
output {
if "beat" in [tags] {
elasticsearch {
hosts => elasticsearch
index => "logstash-beats-%{+YYYY.MM.dd}"
template => "/beats-template.json"
}
}
}