Files
securityonion/salt/logstash/files/conf.d/1000_preprocess_log_elapsed.conf
2018-02-05 12:36:27 -05:00

14 lines
301 B
Plaintext

# Author: Justin Henderson
# SANS Instructor and author of SANS SEC555: SIEM and Tactical Analytics
# Email: justin@hasecuritysolution.com
# Last Update: 12/9/2016
filter {
ruby {
code => "event.set('task_start', Time.now.to_f)"
}
mutate {
#add_tag => [ "conf_file_1000"]
}
}