mirror of https://github.com/infosecn1nja/HELK.git
updated logstash output to try two hosts
parent
bda7ab415a
commit
1453b3fea0
|
@ -1,7 +1,7 @@
|
|||
output {
|
||||
if [@metadata][source] == "winlogbeat" {
|
||||
elasticsearch {
|
||||
hosts => ["elasticsearch:9200"]
|
||||
hosts => ["elasticsearch:9200", "127.0.0.1:9200"]
|
||||
sniffing => true
|
||||
manage_template => false
|
||||
index => "%{[@metadata][beat]}-%{+YYYY.MM.dd}"
|
||||
|
|
Loading…
Reference in New Issue