mirror of
https://github.com/Security-Onion-Solutions/securityonion.git
synced 2026-05-04 18:37:52 +02:00
Mike Reeves
18 lines
614 B
Django/Jinja
18 lines
614 B
Django/Jinja
{%- set ES = salt['grains.get']('master') -%}
|
|
{%- set ES_USER = salt['pillar.get']('elasticsearch:auth:users:so_elastic_user:user', '') %}
|
|
{%- set ES_PASS = salt['pillar.get']('elasticsearch:auth:users:so_elastic_user:pass', '') %}
|
|
output {
|
|
if "filebeat" in [metadata][pipeline] {
|
|
elasticsearch {
|
|
id => "filebeat_modules_metadata_pipeline"
|
|
pipeline => "%{[metadata][pipeline]}"
|
|
hosts => "{{ ES }}"
|
|
user => "{{ ES_USER }}"
|
|
password => "{{ ES_PASS }}"
|
|
index => "so-%{[event][module]}-%{+YYYY.MM.dd}"
|
|
ssl => true
|
|
ssl_certificate_verification => false
|
|
}
|
|
}
|
|
}
|