Files
securityonion/salt/logstash/soc_logstash.yaml
2023-05-01 10:40:36 -04:00

45 lines
1.4 KiB
YAML

logstash:
assigned_pipelines:
roles:
reciever: &assigned_pipelines
description: List of pipelines assigned to this role.
advanced: True
helpLink: logstash.html
multiline: True
fleet: *assigned_pipelines
manager: *assigned_pipelines
nodes: *assigned_pipelines
search: *assigned_pipelines
settings:
lsheap:
description: Heap size to use for logstash
helpLink: logstash.html
global: False
config:
http_x_host:
description: Host interface to listen to connections.
helpLink: logstash.html
readonly: True
path_x_logs:
description: Path inside the container to wrote logs.
helpLink: logstash.html
readonly: True
pipeline_x_workers:
description: Number of worker threads to process events in logstash.
helpLink: logstash.html
global: False
pipeline_x_batch_x_size:
description: Logstash batch size.
helpLink: logstash.html
global: False
pipeline_x_ecs_compatibility:
description: Sets ECS compatibility. This is set per pipeline so you should never need to change this.
helpLink: logstash.html
readonly: True
dmz_nodes:
description: "List of receiver nodes in DMZs. Prevents sensors from sending to these receivers. Primarily used for external Elastic agents."
helpLink: logstash.html
multiline: True
advanced: True
forcedType: "[]string"