Files
securityonion/salt/logstash/files/conf.d/0001_input_json.conf
2018-02-05 12:36:27 -05:00

19 lines
343 B
Plaintext

# Author: Justin Henderson
# SANS Instructor and author of SANS SEC555: SIEM and Tactical Analytics
# Email: justin@hasecuritysolution.com
# Last Update: 12/9/2016
input {
tcp {
port => 6051
codec => json
tags => [ "json" ]
}
}
filter {
if "json" in [tags] {
mutate {
#add_tag => [ "conf_file_0001"]
}
}
}