mirror of
https://github.com/Security-Onion-Solutions/securityonion.git
synced 2025-12-06 09:12:45 +01:00
37 lines
625 B
Plaintext
37 lines
625 B
Plaintext
{
|
|
"description": "Pipeline for parsing pfSense Suricata logs.",
|
|
"processors": [
|
|
{ "set": {
|
|
"field": "event.module",
|
|
"value": "suricata"
|
|
}
|
|
},
|
|
{
|
|
"pipeline": {
|
|
"name": "suricata.common_pfsense"
|
|
}
|
|
}
|
|
],
|
|
"on_failure": [
|
|
{
|
|
"set": {
|
|
"field": "event.kind",
|
|
"value": "pipeline_error"
|
|
}
|
|
},
|
|
{
|
|
"append": {
|
|
"field": "error.message",
|
|
"value": "{{{ _ingest.on_failure_message }}}"
|
|
}
|
|
}
|
|
],
|
|
"_meta": {
|
|
"managed_by": "fleet",
|
|
"managed": true,
|
|
"package": {
|
|
"name": "pfsense"
|
|
}
|
|
}
|
|
}
|