Files
securityonion/salt/logstash/files/conf.d/0000_input_syslogng.conf
2018-02-05 12:36:27 -05:00

20 lines
343 B
Plaintext

# Original Author: Justin Henderson
# SANS Instructor and author of SANS SEC555: SIEM and Tactical Analytics
# Updated by: Doug Burks
# Last Update: 5/15/2017
input {
tcp {
port => 6050
codec => json
tags => "syslogng"
}
}
filter {
if "syslogng" in [tags] {
mutate {
#add_tag => [ "conf_file_0000"]
}
}
}