telekom-security/tpotce
1
0
Fork 0
mirror of https://github.com/telekom-security/tpotce.git synced 2025-07-02 01:27:27 -04:00
Code Issues Packages Projects Releases Wiki Activity

prep for elk 7.9

Browse Source
This commit is contained in:
t3chn0m4g3
2020-08-24 10:35:46 +00:00
parent c1f7146800
commit 5080151b7c
6 changed files with 26 additions and 178 deletions
Download Patch File Download Diff File Expand all files Collapse all files

30
docker/elk/logstash/dist/update.sh vendored
View File

@ -35,11 +35,27 @@ if [ "$myCHECK" == "0" ];
echo "Cannot reach Listbot, starting Logstash without latest translation maps."
fi
# Make sure logstash can put latest logstash template by deleting the old one first
# We do want to enforce our es_template thus we always need to delete the default template, putting our default afterwards
# This is now done via common_configs.rb => overwrite default logstash template
#echo "Removing logstash template."
#curl -XDELETE http://elasticsearch:9200/_template/logstash
#echo
#echo "Checking if empty."
#curl -XGET http://elasticsearch:9200/_template/logstash
#echo
echo "Removing logstash template."
curl -s -XDELETE http://elasticsearch:9200/_template/logstash
echo
echo "Checking if empty."
curl -s -XGET http://elasticsearch:9200/_template/logstash
echo
echo "Putting default template."
curl -s -XPUT "http://elasticsearch:9200/_template/logstash" -H 'Content-Type: application/json' -d'
{
"index_patterns" : "logstash-*",
"version" : 60001,
"settings" : {
"index.refresh_interval" : "5s",
"number_of_shards" : 1,
"index.number_of_replicas" : "0",
"index.mapping.total_fields.limit" : "2000",
"index.query": {
"default_field": "*"
}
}
}'
echo