forked from wazuh/wazuh-docker
update ELK and WazuhAPP to version 5.2.1
This commit is contained in:
+1
-1
@@ -1,4 +1,4 @@
|
||||
FROM logstash:5.2.0
|
||||
FROM logstash:5.2.1
|
||||
|
||||
RUN apt-get update
|
||||
|
||||
|
||||
@@ -22,6 +22,10 @@ filter {
|
||||
source => "srcip"
|
||||
target => "GeoLocation"
|
||||
}
|
||||
date {
|
||||
match => ["timestamp", "ISO8601"]
|
||||
target => "@timestamp"
|
||||
}
|
||||
mutate {
|
||||
remove_field => [ "timestamp", "beat", "fields", "input_type", "tags", "count" ]
|
||||
}
|
||||
|
||||
Reference in New Issue
Block a user