This commit is contained in:
t3chn0m4g3
2021-12-08 23:55:13 +00:00
parent ff1c12e848
commit 5f29516197
4 changed files with 32 additions and 1 deletions

19
docker/elk/logstash/dist/http.conf vendored Normal file
View File

@ -0,0 +1,19 @@
# Input section
input {
http {
id => "tpot"
host => "0.0.0.0"
port => "80"
}
}
# Output section
output {
elasticsearch {
hosts => ["elasticsearch:9200"]
# With templates now being legacy and ILM in place we need to set the daily index with its template manually. Otherwise a new index might be created with differents settings configured through Kibana.
index => "logstash-%{+YYYY.MM.dd}"
template => "/etc/logstash/tpot_es_template.json"
}
}

View File

@ -0,0 +1,4 @@
- pipeline.id: logstash
path.config: "/etc/logstash/conf.d/logstash.conf"
- pipeline.id: http
path.config: "/etc/logstash/conf.d/http.conf"