yahoo_1999/fk-wazuh
1
0
Fork 0
forked from wazuh/wazuh-docker
Code Pull Requests Activity

Updating logstash configuration

Browse Source
This commit is contained in:
Miguelangel Freitas
2018-07-02 08:13:04 -05:00
committed by GitHub
parent 36cc2607a7
commit 4050621326
1 changed files with 2 additions and 2 deletions
Download Patch File Download Diff File Expand all files Collapse all files
logstash/config/01-wazuh.conf
+2 -2
View File
@@ -26,14 +26,14 @@ filter {
geoip { geoip {
source => "@src_ip" source => "@src_ip"
target => "GeoLocation" target => "GeoLocation"
fields => ["city_name", "continent_code", "country_code2", "country_name", "region_name", "location"] fields => ["city_name", "country_name", "region_name", "location"]
} }
date { date {
match => ["timestamp", "ISO8601"] match => ["timestamp", "ISO8601"]
target => "@timestamp" target => "@timestamp"
} }
mutate { mutate {
remove_field => [ "timestamp", "beat", "input_type", "tags", "count", "@version", "log", "offset", "type","@src_ip"] remove_field => ["timestamp", "beat", "input_type", "tags", "count", "@version", "log", "offset", "type", "@src_ip", "host"]
} }
} }
output { output {