Files
securityonion/salt/logstash/files/conf.d/9998_output_test_data.conf
2018-02-05 12:36:27 -05:00

22 lines
457 B
Plaintext

# Author: Justin Henderson
# SANS Instructor and author of SANS SEC555: SIEM and Tactical Analytics
# Email: justin@hasecuritysolution.com
# Last Update: 12/9/2016
filter {
if "test_data" in [tags] {
mutate {
#add_tag => [ "conf_file_9998"]
}
}
}
output {
if "test_data" in [tags] {
elasticsearch {
hosts => elasticsearch
index => "logstash-test-%{+YYYY.MM.dd}"
template => "/logstash-template.json"
}
}
}