Begin integration of honeyaml

docker/elk/logstash/dist/logstash.conf

@@ -133,6 +133,13 @@ input {
     type => "Heralding"
   }
 
+# Honeyaml
+  file {
+    path => ["/data/honeyaml/log/honeyaml.log"]
+    codec => json
+    type => "Honeyaml"
+  }
+
 # Honeypots
   file {
     path => ["/data/honeypots/log/*.log"]
@@ -540,6 +547,13 @@ filter {
     }
   }
 
+# Honeyaml
+  if [type] == "Honeyaml" {
+    date {
+      match => [ "timestamp", "ISO8601" ]
+    }
+  }
+
 # Honeypots
   if [type] == "Honeypots" {
     date {