mirror of
https://github.com/telekom-security/tpotce.git
synced 2025-07-02 01:27:27 -04:00
start integrating new honeypots into ELK
This commit is contained in:
9
docker/elk/logstash/dist/logstash.conf
vendored
9
docker/elk/logstash/dist/logstash.conf
vendored
@ -517,6 +517,15 @@ filter {
|
|||||||
}
|
}
|
||||||
}
|
}
|
||||||
|
|
||||||
|
# Redishoneypot
|
||||||
|
if [type] == "Redishoneypot" {
|
||||||
|
date {
|
||||||
|
match => [ "time", "yyyy-MM-dd HH:mm:ss" ]
|
||||||
|
remove_field => ["time"]
|
||||||
|
remove_field => ["timestamp"]
|
||||||
|
}
|
||||||
|
}
|
||||||
|
|
||||||
# NGINX
|
# NGINX
|
||||||
if [type] == "NGINX" {
|
if [type] == "NGINX" {
|
||||||
date {
|
date {
|
||||||
|
Reference in New Issue
Block a user