Files
securityonion/salt/logstash/pipelines/config/so/0011_input_endgame.conf
2025-12-11 20:07:06 -06:00

15 lines
423 B
Plaintext

input {
http {
id => "endgame_data"
port => 3765
codec => es_bulk
request_headers_target_field => client_headers
remote_host_target_field => client_host
ssl_enabled => true
ssl_certificate_authorities => ["/usr/share/filebeat/ca.crt"]
ssl_certificate => "/usr/share/logstash/filebeat.crt"
ssl_key => "/usr/share/logstash/filebeat.key"
ssl_client_authentication => "required"
}
}