Files
securityonion/salt/logstash/pipelines/config/so/7200_strelka.conf

9 lines
86 B
Plaintext

filter {
if [type] =~ "strelka" {
json {
source => "message"
}
}
}