infosecn1nja
/
HELK
mirror of https://github.com/infosecn1nja/HELK.git
1
0
Fork 0
Code Issues Packages Projects Releases Wiki Activity

Update logstash.conf

keyword-vs-text-changes
Roberto Rodriguez 2017-06-07 00:25:47 -04:00 committed by GitHub
parent b7b72191ca
commit 5065558474
1 changed files with 2 additions and 2 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

4
logstash/docker/pipeline/logstash.conf
View File

@ -9,11 +9,11 @@ input {
output { output {
if [@metadata][source] == "winlogbeat" { if [@metadata][source] == "winlogbeat" {
elasticsearch { elasticsearch {
hosts => ["localhost:9200"] hosts => "elasticsearch:9200"
sniffing => true sniffing => true
manage_template => false manage_template => false
index => "%{[@metadata][beat]}-%{+YYYY.MM.dd}" index => "%{[@metadata][beat]}-%{+YYYY.MM.dd}"
document_type => "%{[@metadata][type]}" document_type => "%{[@metadata][type]}"
} }
} }
} }