telekom-security/tpotce
1
0
Fork 0
mirror of https://github.com/telekom-security/tpotce.git synced 2025-07-02 01:27:27 -04:00
Code Issues Packages Projects Releases Wiki Activity

bump ELK to 6.4.0

Browse Source 
YES! Index patterns can finally exported through Kibana! A joy to the ELK world :-)
This commit is contained in:
listbot
2018-08-24 17:07:00 +00:00
parent ea1bf604c8
commit 59c8c5b34c
4 changed files with 8 additions and 8 deletions
Download Patch File Download Diff File Expand all files Collapse all files

4
docker/elk/logstash/Dockerfile
View File

@ -17,9 +17,9 @@ RUN apk -U --no-cache add \
git clone --depth=1 https://github.com/dtag-dev-sec/listbot /etc/listbot && \
cd /root/dist/ && \
mkdir -p /usr/share/logstash/ && \
wget https://artifacts.elastic.co/downloads/logstash/logstash-6.3.2.tar.gz && \
wget https://artifacts.elastic.co/downloads/logstash/logstash-6.4.0.tar.gz && \
wget http://geolite.maxmind.com/download/geoip/database/GeoLite2-ASN.tar.gz && \
tar xvfz logstash-6.3.2.tar.gz --strip-components=1 -C /usr/share/logstash/ && \
tar xvfz logstash-6.4.0.tar.gz --strip-components=1 -C /usr/share/logstash/ && \
/usr/share/logstash/bin/logstash-plugin install logstash-filter-translate && \
/usr/share/logstash/bin/logstash-plugin install logstash-output-syslog && \
tar xvfz GeoLite2-ASN.tar.gz --strip-components=1 -C /usr/share/logstash/vendor/bundle/jruby/2.3.0/gems/logstash-filter-geoip-5.0.3-java/vendor/ && \

2
docker/elk/logstash/dist/logstash.conf vendored
View File

@ -394,7 +394,7 @@ if "_grokparsefailure" in [tags] { drop {} }
output {
elasticsearch {
hosts => ["elasticsearch:9200"]
document_type => "doc"
# document_type => "doc"
}
if [type] == "Suricata" {