Files
securityonion/salt/logstash/files/conf.d/0005_input_suricata.conf
2018-02-05 12:36:27 -05:00

19 lines
345 B
Plaintext

# Author: Justin Henderson
# SANS Instructor and author of SANS SEC555: SIEM and Tactical Analytics
# Email: justin@hasecuritysolution.com
# Last Update: 12/9/2016
input {
tcp {
port => 6053
codec => json
type => "suricata"
}
}
filter {
if [type] == "suricata" {
mutate {
#add_tag => [ "conf_file_0005"]
}
}
}