infosecn1nja
/
HELK
mirror of https://github.com/infosecn1nja/HELK.git
1
0
Fork 0
Code Issues Packages Projects Releases Wiki Activity

Troubleshooting the output file.

keyword-vs-text-changes
richiercyrus 2019-01-08 15:38:57 -08:00
parent 12e4de9996
commit d372ef452d
2 changed files with 4 additions and 12 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

12
docker/helk-logstash/pipeline/8116-osquery-filter.conf
View File

@ -1,12 +0,0 @@
# HELK osquery filter conf file
# HELK build Stage: Alpha
# Author: Richie Cyrus (@rrcyrus)
# License: GPL-3.0
filter {
if [source] == "/var/log/osquery/osqueryd.results.log"{
json {
source => "message"
}
}
}

4
docker/helk-logstash/pipeline/9958-osquery-output.conf
View File

@ -13,3 +13,7 @@ output {
} }
} }
} }