DefensiveDepth f0c1922600 Support endpoint logs with no host.ip field

2025-09-12 13:31:34 -04:00

..

ingest

Support endpoint logs with no host.ip field

2025-09-12 13:31:34 -04:00

ingest-dynamic

name destination_geo & source_geo to destination.as and source.as better aligning with ECS and linking other log sources already using .as for ASN geo data.

2025-07-25 16:17:22 -05:00

curl.config.template

requires and ordering for socusersroles state

2022-01-10 14:39:00 -05:00

elasticsearch.yaml.jinja

add the jinja template

2021-09-09 10:19:46 -04:00

log4j2.properties

Fix matching logic

2022-04-18 10:37:38 -04:00