telekom-security/tpotce
1
0
Fork 0
mirror of https://github.com/telekom-security/tpotce.git synced 2025-07-02 01:27:27 -04:00
Code Issues Packages Projects Releases Wiki Activity

tweaking

Browse Source 
Update logstash config for new Dicompot fields
Revert Dionaea back to 0.8.0, latest master was unstable
This commit is contained in:
t3chn0m4g3
2020-06-26 23:48:48 +00:00
parent 6419f4d521
commit 16a7cdb975
3 changed files with 11 additions and 11 deletions
Download Patch File Download Diff File Expand all files Collapse all files

10
docker/elk/logstash/dist/logstash.conf vendored
View File

@ -314,9 +314,8 @@ filter {
}
mutate {
rename => {
"[Address][IP]" => "src_ip"
"[Address][Port]" => "src_port"
"[Address][Zone]" => "zone"
"IP" => "src_ip"
"Port" => "src_port"
"AETitle" => "aetitle"
"Command" => "input"
"Files" => "files"
@ -326,11 +325,6 @@ filter {
"Version" => "version"
}
}
if [Address] {
mutate {
remove_field => "[Address]"
}
}
}
# ElasticPot