diff --git a/docker/helk-logstash/pipeline/8116-osquery-filter.conf b/docker/helk-logstash/pipeline/8116-osquery-filter.conf deleted file mode 100644 index 23209e4..0000000 --- a/docker/helk-logstash/pipeline/8116-osquery-filter.conf +++ /dev/null @@ -1,12 +0,0 @@ -# HELK osquery filter conf file -# HELK build Stage: Alpha -# Author: Richie Cyrus (@rrcyrus) -# License: GPL-3.0 - -filter { - if [source] == "/var/log/osquery/osqueryd.results.log"{ - json { - source => "message" - } - } -} diff --git a/docker/helk-logstash/pipeline/9958-osquery-output.conf b/docker/helk-logstash/pipeline/9958-osquery-output.conf index e5abe24..620bf0c 100644 --- a/docker/helk-logstash/pipeline/9958-osquery-output.conf +++ b/docker/helk-logstash/pipeline/9958-osquery-output.conf @@ -13,3 +13,7 @@ output { } } } + + + +